orcus | a95c6033c36e471c1dfea3f7f6975bdb788a5f40fdbb6527779a6cb34e1bae5e

General

Target

a95c6033c36e471c1dfea3f7f6975bdb788a5f40fdbb6527779a6cb34e1bae5e
Size

8.5MB
MD5

5a3a5c2adeced8ccd88c966b036eca10
SHA1

d5a4d071368e136132b7236524cd9f0a1c50b995
SHA256

a95c6033c36e471c1dfea3f7f6975bdb788a5f40fdbb6527779a6cb34e1bae5e
SHA512

22bce15fc4b0483945884546a6113a41087c39237ff03e59d50dfba3de2b074cab9af85b6bbdc50efe83f6393ac1c1a7eacc228f0fca798b118690ec7f38dc89
SSDEEP

24576:l6xS04YNEMuExDiU6E5R9s8xY/2l/dBLc83oIbt+rc:l6z4auS+UjfU2Tpt3oIbt+r

Score

10^/10

rat orcus

Family

orcus

C2

/once-kings.gl.at.ply.gg

Mutex

4ae0bc3e19914a8c8be89f13c20761a0

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
11/06/2024 07:09:51
plugins
AgUFyfihswTdIPqEArukcmEdSF06Hw9CAFMAbwBEACAAUAByAG8AdABlAGMAdABpAG8AbgAHAzEALgAwAEEgOAA4ADUANgA1ADkAYQBjADUAZgBmADEANAAyAGMAMwA4ADAANQBiADIAOQAyADMAOAAzADMAMwBkADEAMQBlAAEAAAACAg==
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a95c6033c36e471c1dfea3f7f6975bdb788a5f40fdbb6527779a6cb34e1bae5e