463842e56e3ae95d1fe8feaee541dc88a31f4f1f48330c6c78df9661e3181949

Submit
Reports

Overview

overview

Static

static

Orcus Admi...on.exe

windows11-21h2-x64

Orcus Admi...ew.vbs

windows11-21h2-x64

Orcus Admi...er.vbs

windows11-21h2-x64

Orcus Admi...es.vbs

windows11-21h2-x64

Orcus Admi...ons.js

windows11-21h2-x64

Orcus Admi...er.dll

windows11-21h2-x64

Orcus Admi...il.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ed.dll

windows11-21h2-x64

Orcus Admi...it.dll

windows11-21h2-x64

Orcus Admi...es.dll

windows11-21h2-x64

Orcus Admi...er.dll

windows11-21h2-x64

Orcus Admi...ent.js

windows11-21h2-x64

Orcus Admi...del.js

windows11-21h2-x64

Orcus Admi...gin.js

windows11-21h2-x64

Orcus Admi...er.vbs

windows11-21h2-x64

Orcus Admi...es.vbs

windows11-21h2-x64

Orcus Admi...ro.dll

windows11-21h2-x64

Orcus Admi...st.dll

windows11-21h2-x64

Orcus Admi...it.dll

windows11-21h2-x64

Orcus Admi...ty.dll

windows11-21h2-x64

Orcus Admi...es.dll

windows11-21h2-x64

Orcus Admi...il.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ns.dll

windows11-21h2-x64

Orcus Admi...ed.dll

windows11-21h2-x64

Orcus Admi...st.dll

windows11-21h2-x64

Orcus Admi...it.dll

windows11-21h2-x64

Orcus Admi...ty.dll

windows11-21h2-x64

Orcus Admi...es.dll

windows11-21h2-x64

Orcus Admi...cs.dll

windows11-21h2-x64

Analysis

max time kernel
431s
max time network
1158s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
10-11-2024 18:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

orcus

5 signatures

Behavioral task

behavioral1

Sample

Orcus Administartion/Orcus.Administration.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

2 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/ExtensionSpooferBuilderPropertyView.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/Properties/Resources.Designer.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/Properties/Resources.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/StringExtensions.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/ExtensionSpoofer.dll

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Mono.Cecil.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Orcus.Administration.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Orcus.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Orcus.Shared.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/Sorzus.Wpf.Toolkit.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/bin/Debug/de/Orcus.Plugins.resources.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Orcus Administartion/Orcus.Plugins.ExtensionSpoofer-master/Source/obj/Debug/ExtensionSpoofer.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Client.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/MainViewModel.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Plugin.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Properties/Resources.Designer.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/Properties/Resources.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/MahApps.Metro.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/ServerStressTest.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/Sorzus.Wpf.Toolkit.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/System.Windows.Interactivity.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/de/Orcus.Plugins.resources.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Mono.Cecil.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Orcus.Administration.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral26

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Orcus.Plugins.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Orcus.Shared.dll

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral28

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/ServerStressTest.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/Sorzus.Wpf.Toolkit.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/System.Windows.Interactivity.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Release/de/Orcus.Plugins.resources.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

Orcus Administartion/Orcus.Plugins.ServerStressTest-master/Source/bin/Debug/ServerStressTest.dll
Size

26KB
MD5

17baea4a6d7ddd2ab381e53c7770c845
SHA1

391097034dbbeff545f6a3ffdf1ba10779f362d7
SHA256

55850f4f8fced3d5d443111ebc48d958aa7a88337d285e4a2926444db070973e
SHA512

267ef084225afcca02ea4fb7c18e28baebbbd5916cc6f160128aae1f9a868e13f2e9a25afe9a1a22b988c30187877122207e68215227d4db26ccb4296d8a37c8
SSDEEP

384:4ex4iNCBO+GcxpFS6chKdzCx8clxGa/mObL+zE/3fiwSaz8nqQJuJjHZ2Hyd8/kr:4AtgO+GipFLemk+Pwl23VH/xtntS

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Orcus Administartion\Orcus.Plugins.ServerStressTest-master\Source\bin\Debug\ServerStressTest.dll",#1
1⤵
PID:3328

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads