orcus | 19e022f15d4444a4395954a220d8887d2ec92ae5b22791215a9d1e50e438286f

General

Target

19e022f15d4444a4395954a220d8887d2ec92ae5b22791215a9d1e50e438286f
Size

1.2MB
MD5

c84364fd225a5aada66b50d5267b497f
SHA1

458c15337b34cef126df92e121c8ecbccce27693
SHA256

19e022f15d4444a4395954a220d8887d2ec92ae5b22791215a9d1e50e438286f
SHA512

7974fd587a329f40034934a204a49108b576693b86e673126ab418ee5798fc7e9a6da45ac3594d16c2eab5478bae5ce79fb00067019ee593c2dabdbee1eae105
SSDEEP

24576:zTS04YNEMuExDiU6E5R9s8xY/2l/dRJ5dtsPxNGfqigIbt+rS:zJ4auS+UjfU2T/5XDMIbt+r

Score

10^/10

rat orcus

Family

orcus

C2

192.168.0.40

94.4.114.86

Mutex

0538f4b09b304744b4aecee8714f342c

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
12/02/2024 18:14:27
plugins
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
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e022f15d4444a4395954a220d8887d2ec92ae5b22791215a9d1e50e438286f