Overview

overview

10

Static

static

10

Orcus.Admi...on.exe

windows7-x64

3

Orcus.Admi...on.exe

windows10-2004-x64

3

libraries/...ow.dll

windows7-x64

1

libraries/...ow.dll

windows10-2004-x64

1

libraries/...eo.dll

windows7-x64

1

libraries/...eo.dll

windows10-2004-x64

1

libraries/...ox.dll

windows7-x64

1

libraries/...ox.dll

windows10-2004-x64

1

libraries/CSCore.dll

windows7-x64

1

libraries/CSCore.dll

windows10-2004-x64

1

libraries/...Ex.dll

windows7-x64

1

libraries/...Ex.dll

windows10-2004-x64

1

libraries/...Ex.dll

windows7-x64

1

libraries/...Ex.dll

windows10-2004-x64

1

libraries/...ed.dll

windows7-x64

1

libraries/...ed.dll

windows10-2004-x64

1

libraries/...ed.dll

windows7-x64

1

libraries/...ed.dll

windows10-2004-x64

1

libraries/...er.dll

windows7-x64

1

libraries/...er.dll

windows10-2004-x64

1

libraries/...op.dll

windows7-x64

1

libraries/...op.dll

windows10-2004-x64

1

libraries/...it.dll

windows7-x64

1

libraries/...it.dll

windows10-2004-x64

1

libraries/...ib.dll

windows7-x64

1

libraries/...ib.dll

windows10-2004-x64

1

libraries/...rk.dll

windows7-x64

1

libraries/...rk.dll

windows10-2004-x64

1

libraries/...al.dll

windows7-x64

1

libraries/...al.dll

windows10-2004-x64

1

libraries/...ro.dll

windows7-x64

1

libraries/...ro.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    92s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2024 18:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    libraries/Exceptionless.Signed.dll

  • Size

    734KB

  • MD5

    4787a519cfd30d7a7687ee62de7d8a47

  • SHA1

    9f9213692517aaa331ab0622e24b9458f483e95e

  • SHA256

    57b7be985c0b4630b8ca581e978e88671ae5912d06807891edd1d10e552d3765

  • SHA512

    c74f7f4396082ab6f245ac7fcc61161cbc5582464bc78b3cf42deb08f9e44304568f462753b5c25122bcac4f58e766594426f7ff044d14c7b17f24825d3109d0

  • SSDEEP

    12288:SIKYlJjYbqxA6eWYHSpim8bVNVJIdUMhik5Kp5dBHLrVr4JOQ:l9a6erSpim8ZNVJI6x5dBHLrVr4JOQ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libraries\Exceptionless.Signed.dll,#1
    1⤵
      PID:1872

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads