orcus | c6071501a797d26d9db29ecb3f2b5137bc59c7e06b8bbb3ccdb615c65ff3c620

General

Target

c6071501a797d26d9db29ecb3f2b5137bc59c7e06b8bbb3ccdb615c65ff3c620
Size

846KB
MD5

a4f5fb669ad89d875dcf5c4a5bbd83ca
SHA1

aea2c7b6e7a1f35b020db77d84c2959dcd11e592
SHA256

c6071501a797d26d9db29ecb3f2b5137bc59c7e06b8bbb3ccdb615c65ff3c620
SHA512

e2b8645533feef0b30c8e96ba4580ed522ce61f9e4744b8c129d00a827dc531de8a952c256aef2880f66acbfd70e741d035b4b7257b28a429c0ef032d4f93e67
SSDEEP

24576:Ol9S04YNEMuExDiU6E5R9s8xY/2l/dOB+Ibt+rq1:Olv4auS+UjfU2TW+Ibt+ry

Score

10^/10

rat orcus

Family

orcus

C2

100.81.139.78

Mutex

60f564945224442d80b2e5489060a433

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
11/24/2024 20:57:47
plugins
AgUFyfihswTdIPqEArukcmEdSF06Hw9CAFMAbwBEACAAUAByAG8AdABlAGMAdABpAG8AbgAHAzEALgAwAEEgZgAxAGYAMAA4ADQAOQBjADgANQBlADUANAA4AGUAMABhADUAZABiADkAOAA1AGIAOABhADYAYwBmADkANAAwAAEFl6aNkQPXkQKOmwKLvFcpr24sKCsVRABpAHMAYQBiAGwAZQAgAFcAZQBiAGMAYQBtACAATABpAGcAaAB0AHMABwMxAC4AMABBIGQAMgBmADMAOQAzAGQANAA4ADcAZgA4ADQANwBjADAAYgAwAGIAYwA0AGQAMABkAGUAOQA0ADcAMQA5AGQAYQABAAAEBA==
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6071501a797d26d9db29ecb3f2b5137bc59c7e06b8bbb3ccdb615c65ff3c620