3786d314f4e3906400b24657ed15fca047576eba9cf17630246db69503fdbea3

Analysis

max time kernel
123s
max time network
133s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
28-12-2024 18:38

Target

OrcusRAT-main/libraries/Orcus.Administration.Plugins.dll
Size

34KB
MD5

358e21f82feabac03af75599b09532bd
SHA1

b6523b40151fa7090d1a2c44f2b7335170b2d7aa
SHA256

ba011053d673579f781de553994366683d7ea57410ae8d10d9823387ee94b918
SHA512

7334c3b0dcddd321f9fa0536b5000151a4b65f7da5b41e1f70009af7cfdaee70c44d07ce4d5f7eded97d30a89b9c1bb71a18e39fc6243b0fc07a5e3ee05dd1d9
SSDEEP

768:tjV7GiFiE1OiO/eWKYXU6I8xdh0RqjfYzBUwT:th7GiEwOiO2WFAMQR

Score

1^/10

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\OrcusRAT-main\libraries\Orcus.Administration.Plugins.dll,#1
1⤵
PID:4552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=5188,i,14915339153108214952,13513928827091056845,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:8
1⤵
PID:4088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4720,i,14915339153108214952,13513928827091056845,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:8
1⤵
PID:5612