orcus | 6699938ce314896c3f5d86789988c1a7c8b9cca0095b16e46512d0c6947e38b0

General

Target

6699938ce314896c3f5d86789988c1a7c8b9cca0095b16e46512d0c6947e38b0
Size

1.2MB
MD5

27741d70d8dc3815eafc9173a0258c39
SHA1

4efc34985a0afdc24bd8daef4b2b9917a29baa40
SHA256

6699938ce314896c3f5d86789988c1a7c8b9cca0095b16e46512d0c6947e38b0
SHA512

4ef1e069de2f6627e74e057858502eb115609c3fef88f982c6f67c714588a545118e50c6f4210df2ab43fb73b34d050f9d7d37794792cb84ffb20df26067e78c
SSDEEP

24576:YTS04YNEMuExDiU6E5R9s8xY/2l/dRJ5dtsPxNGfqiEIbt+rq:YJ4auS+UjfU2T/5XDoIbt+r

Score

10^/10

rat orcus

Family

orcus

C2

192.168.0.40

94.4.114.86

Mutex

7b6ec1ef17c4472fb8c933c6f4f0bf69

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
2
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
12/02/2024 00:07:45
plugins
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
reconnect_delay
10000
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6699938ce314896c3f5d86789988c1a7c8b9cca0095b16e46512d0c6947e38b0