Overview

overview

10

Static

static

10

Orcus.Admi...on.exe

windows7-x64

3

Orcus.Admi...on.exe

windows10-2004-x64

3

libraries/...ow.dll

windows7-x64

1

libraries/...ow.dll

windows10-2004-x64

1

libraries/...eo.dll

windows7-x64

1

libraries/...eo.dll

windows10-2004-x64

1

libraries/...ox.dll

windows7-x64

1

libraries/...ox.dll

windows10-2004-x64

1

libraries/CSCore.dll

windows7-x64

1

libraries/CSCore.dll

windows10-2004-x64

1

libraries/...Ex.dll

windows7-x64

1

libraries/...Ex.dll

windows10-2004-x64

1

libraries/...Ex.dll

windows7-x64

1

libraries/...Ex.dll

windows10-2004-x64

1

libraries/...ed.dll

windows7-x64

1

libraries/...ed.dll

windows10-2004-x64

1

libraries/...ed.dll

windows7-x64

1

libraries/...ed.dll

windows10-2004-x64

1

libraries/...er.dll

windows7-x64

1

libraries/...er.dll

windows10-2004-x64

1

libraries/...op.dll

windows7-x64

1

libraries/...op.dll

windows10-2004-x64

1

libraries/...it.dll

windows7-x64

1

libraries/...it.dll

windows10-2004-x64

1

libraries/...ib.dll

windows7-x64

1

libraries/...ib.dll

windows10-2004-x64

1

libraries/...rk.dll

windows7-x64

1

libraries/...rk.dll

windows10-2004-x64

1

libraries/...al.dll

windows7-x64

1

libraries/...al.dll

windows10-2004-x64

1

libraries/...ro.dll

windows7-x64

1

libraries/...ro.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2024 18:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    libraries/Exceptionless.Wpf.Signed.dll

  • Size

    26KB

  • MD5

    1b3a319b40f7cf78253d79ce3b8c0d42

  • SHA1

    23b6d076946967e4921f97e024ed68b72cbfbe3b

  • SHA256

    60cc0b13a13be7b36f2e1637b4d8f7f64ccef198bb258b318fde9c2810ac2447

  • SHA512

    48ab69135c9f8c54eaf2c7b561ebf475d2a61e5911bcdf469b777f3bdea3d04697805fe09de7f81d57466e0904d2b625c7a1fd35e07f574c70ac70a6d486faf2

  • SSDEEP

    384:4foIgJjjnB13YuPwfkaNOAsL6L5vGLxrZfvTOtDTjzImcOFz/Ym1T9yQT0B0Am9B:4foZjjBJiLxkOtDbcsz/9NVGZBw7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libraries\Exceptionless.Wpf.Signed.dll,#1
    1⤵
      PID:4364

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads