463842e56e3ae95d1fe8feaee541dc88a31f4f1f48330c6c78df9661e3181949

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Orcus Admi...on.exe

windows11-21h2-x64

Orcus Admi...ew.vbs

windows11-21h2-x64

Orcus Admi...er.vbs

windows11-21h2-x64

Orcus Admi...es.vbs

windows11-21h2-x64

Orcus Admi...ons.js

windows11-21h2-x64

Orcus Admi...er.dll

windows11-21h2-x64

Orcus Admi...il.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ed.dll

windows11-21h2-x64

Orcus Admi...it.dll

windows11-21h2-x64

Orcus Admi...es.dll

windows11-21h2-x64

Orcus Admi...er.dll

windows11-21h2-x64

Orcus Admi...ent.js

windows11-21h2-x64

Orcus Admi...del.js

windows11-21h2-x64

Orcus Admi...gin.js

windows11-21h2-x64

Orcus Admi...er.vbs

windows11-21h2-x64

Orcus Admi...es.vbs

windows11-21h2-x64

Orcus Admi...ro.dll

windows11-21h2-x64

Orcus Admi...st.dll

windows11-21h2-x64

Orcus Admi...it.dll

windows11-21h2-x64

Orcus Admi...ty.dll

windows11-21h2-x64

Orcus Admi...es.dll

windows11-21h2-x64

Orcus Admi...il.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ed.dll

windows11-21h2-x64

Orcus Admi...st.dll

windows11-21h2-x64

Orcus Admi...it.dll

windows11-21h2-x64

Orcus Admi...ty.dll

windows11-21h2-x64

Orcus Admi...es.dll

windows11-21h2-x64

Orcus Admi...cs.dll

windows11-21h2-x64

Analysis

max time kernel
802s
max time network
1527s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
10/11/2024, 18:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

orcus

5 signatures

Behavioral task

behavioral1

Sample

Orcus Administartion/Orcus.Administration.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

2 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/ExtensionSpooferBuilderPropertyView.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/Properties/Resources.Designer.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/Properties/Resources.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/StringExtensions.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/ExtensionSpoofer.dll

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Mono.Cecil.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Orcus.Administration.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Orcus.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Orcus.Shared.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Sorzus.Wpf.Toolkit.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/de/Orcus.Plugins.resources.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/obj/Debug/ExtensionSpoofer.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Client.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/MainViewModel.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Plugin.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Properties/Resources.Designer.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Properties/Resources.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/MahApps.Metro.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/ServerStressTest.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/Sorzus.Wpf.Toolkit.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/System.Windows.Interactivity.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/de/Orcus.Plugins.resources.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Mono.Cecil.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Orcus.Administration.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral26

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Orcus.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Orcus.Shared.dll

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral28

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/ServerStressTest.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Sorzus.Wpf.Toolkit.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/System.Windows.Interactivity.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/de/Orcus.Plugins.resources.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Sorzus.Wpf.Toolkit.dll
Size

60KB
MD5

ad100bd000dc8301a6caa9b6426ae5da
SHA1

b29863359973f228f11c1c567c5c5c2b98e373cb
SHA256

4d9b236309b7c2ea4f824a2d301c9b7b09733ba1c08c7824d435c4afe5de9886
SHA512

9855648988d4bc65612a9bb3b8800db4a0b4e4b0e27e03d3836c852060f65698a2cd3a64aad8e7657ec6798b0959c9832f979411923a8d41ba6cbb43505787f7
SSDEEP

768:J81CdXuEcPnppfpH55IMrngVXpuwai8FLivooAzoy7TfsXjcgpH5puq:GjfaMEXuwMLie0yyjcgpHb

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Orcus Administartion\Orcus.Plugins.ExtensionSpoofer-master\Source\bin\Debug\Sorzus.Wpf.Toolkit.dll",#1
1⤵
PID:3948

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads