General

  • Target

    79c7e85a85d1e1ac4f606dfc86ad5a42ad4efed87025497bb4c8f6c633e4c970

  • Size

    11.4MB

  • MD5

    ff89d18d0a8bf7a26b63518d6c522cb5

  • SHA1

    8ef17282972234b1761adebaff024edcdfaabbde

  • SHA256

    79c7e85a85d1e1ac4f606dfc86ad5a42ad4efed87025497bb4c8f6c633e4c970

  • SHA512

    ff79cf2b7a01fd7dfd9a889e5faa09583f276c370bc603b1baa1eef5f47ea747f6acf02a04f6b00ff08dfd0f7f6178f72396170094a9753070f21db6c2f9a1dc

  • SSDEEP

    196608:qdk0W8/9E6DY8XMCHGLLc54i1wN+lPIcu9KYK39srRqZksfidSEo3PP/NMRRcHx3:sW81LXMCHWUjqcuIOeTd9/P/N9B

Score
10/10

Malware Config

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
  • Orcus main payload 1 IoCs
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79c7e85a85d1e1ac4f606dfc86ad5a42ad4efed87025497bb4c8f6c633e4c970
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • test.pyc