orcus | e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8

General

Target

e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8
Size

843KB
MD5

574ba4bc9851970c901d0ba9156f47fa
SHA1

171f47ef050add0f5c2fb917e9c6dcc4beae76bb
SHA256

e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8
SHA512

ab024d27086eac1bde1593c51592533bd11adf9579a8732243d9e12e7b7a410b8edbc1cfc92c0934de45317742d7c5897b3842048063a5af46a15055b7f2c3c8
SSDEEP

24576:3RS04YNEMuExDiU6E5R9s8xY/2l/d7EIbt+r2:3T4auS+UjfU2T7EIbt+r

Score

10^/10

rat orcus

Family

orcus

C2

93.103.124.241

Mutex

e47fb9025e7c4050967f99308fd27726

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
12/25/2024 19:25:59
plugins
AgUFl6aNkQPXkQKOmwKLvFcpr24sKCsVRABpAHMAYQBiAGwAZQAgAFcAZQBiAGMAYQBtACAATABpAGcAaAB0AHMABwMxAC4AMABBIDEANQAyAGMANwA0ADAANABmAGYAOAAyADQANQBhADMAOABhADgAYwA3ADEAYgA2AGEAZgA5ADEAYQBjAGIAZQABAAAAAgI=
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8