Overview

overview

10

Static

static

10

93db751617...fe.exe

windows7-x64

10

93db751617...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93db7516173baef742090e042347142ab0c48ab7d5175417ec7aa10ae66961fe

  • Size

    3.0MB

  • MD5

    035a7d77f518443bed37aba5e028437d

  • SHA1

    2b4090d2c65e08fda29b48e1a43267f132f76a53

  • SHA256

    93db7516173baef742090e042347142ab0c48ab7d5175417ec7aa10ae66961fe

  • SHA512

    ea59649116c3137123c6ced6c51e977770bcaf2a3446a9bf7d06e1d90aad055dae18d55364749b8050f72dba8674325d8af1fe3b46146ed29a256e58717b063e

  • SSDEEP

    49152:gjXS4QZeM9/sj9aB50J5srKq9lPAypQxbvVo9JnCm8eWncFfHIp4gJ3DF:gmKSf0HcyypSbvVo9JCm

Score
10/10
orcus

Malware Config

Extracted

Family

orcus

C2

vimeworldserverstat.serveminecraft.net:3306

Mutex

ea91e682793844fca9bc0ca6e3ab757b

Attributes
  • autostart_method

    Registry

  • enable_keylogger

    true

  • install_path

    %appdata%\Microsoft Edge\Const\Edge.exe

  • reconnect_delay

    10000

  • registry_keyname

    Edge

  • taskscheduler_taskname

    Orcus

  • watchdog_path

    AppData\EdgeUpgater.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 93db7516173baef742090e042347142ab0c48ab7d5175417ec7aa10ae66961fe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections