Overview

overview

10

Static

static

10

Orcus.Admi...on.exe

windows7-x64

3

Orcus.Admi...on.exe

windows10-2004-x64

10

libraries/...er.dll

windows7-x64

1

libraries/...er.dll

windows10-2004-x64

1

libraries/...ds.dll

windows7-x64

1

libraries/...ds.dll

windows10-2004-x64

1

libraries/...re.dll

windows7-x64

1

libraries/...re.dll

windows10-2004-x64

1

libraries/...er.dll

windows7-x64

1

libraries/...er.dll

windows10-2004-x64

1

libraries/...ns.dll

windows7-x64

1

libraries/...ns.dll

windows10-2004-x64

1

libraries/...es.dll

windows7-x64

1

libraries/...es.dll

windows10-2004-x64

1

libraries/...ls.dll

windows7-x64

1

libraries/...ls.dll

windows10-2004-x64

1

libraries/...ns.dll

windows7-x64

1

libraries/...ns.dll

windows10-2004-x64

1

libraries/...es.dll

windows7-x64

1

libraries/...es.dll

windows10-2004-x64

1

libraries/...ed.dll

windows7-x64

1

libraries/...ed.dll

windows10-2004-x64

1

libraries/...ds.dll

windows7-x64

1

libraries/...ds.dll

windows10-2004-x64

1

libraries/...pf.dll

windows7-x64

1

libraries/...pf.dll

windows10-2004-x64

1

libraries/OxyPlot.dll

windows7-x64

1

libraries/OxyPlot.dll

windows10-2004-x64

1

libraries/...GI.dll

windows7-x64

1

libraries/...GI.dll

windows10-2004-x64

1

libraries/...11.dll

windows7-x64

1

libraries/...11.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2024 23:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    libraries/Orcus.Administration.FileExplorer.dll

  • Size

    108KB

  • MD5

    adfb15f7ff23404085c6d02982b7d99b

  • SHA1

    02a8ef3f63f5234f7ce2255eaa2f1a140424b43b

  • SHA256

    a4144e0d8eba9342aa3f3e1f1dbd8ac75bb9dae7158c94474403016988379285

  • SHA512

    b137341e9affdcca8cd56b8c67a7e33aa6e008ac106ad2d5926656e72a854cbdf52ecf75e340f7fdcc202f8327b451a17a5f9ee234c16f33a3ceb126a96e6edf

  • SSDEEP

    1536:Kr4M/N1tB/vs0ORWoQJ1zhDkTCtpHXT2uj2Oy3RwWSnB7JJ7llJ/7Zxn7FksolO:Kr4k3/SWd1ZkKhj2Yy3RKJb7Zxn7Fr1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libraries\Orcus.Administration.FileExplorer.dll,#1
    1⤵
      PID:1500

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads