Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-11-2024 19:58

General

  • Target

    OrcusRAT-main/libraries/FluentCommandLineParser.dll

  • Size

    43KB

  • MD5

    9b5e37f89268ccce0e098222004093ad

  • SHA1

    30b12174abda6a420b2cc152b5c682ff8f106c37

  • SHA256

    fe068b6f15a5423f86558927dd22ec35070c041db9cde1ecade0590d93ca5285

  • SHA512

    23e8cbaa6103f5a76729ee8470b5b208d67be22c9b9fa78340055ac8ded04dc6147c8c50cde96f7c10b111f81cab3e5504227ac5b8f1a616c1a1384c6350257f

  • SSDEEP

    768:U74t6uOtRT8HuJ071hEdOgaaGoCbvfkGujm:Gc6uOtRa/71UO1onLS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\OrcusRAT-main\libraries\FluentCommandLineParser.dll,#1
    1⤵
      PID:236

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads