Overview

overview

10

Static

static

3

Release.rar

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Release.rar

  • Size

    20.8MB

  • Sample

    250106-qpjehaxnd1

  • MD5

    5cc2b4b8cb72a593f59bd7673519ebd5

  • SHA1

    44a44f9c5030ad8b33a96ea96e661e22dc3e40fa

  • SHA256

    7035d5b2091822730ef2550e6ae60358bffdfa7cfe88643251d8c8de1883d40b

  • SHA512

    8a5499e9f0b727362ecc7021b9865bcd869f2a5864439d3d99c0564bc8956f630698ae55c23e14470af519131720f6c29cfde82a344623664bedaa18e86912f1

  • SSDEEP

    393216:hcVM/SrrTB8wq73zdXKlmxB0OjM1OwjFar0knvmmYhB186lAvtszHz/F3g:QwcTB8wEh6lmxyL5BstEdg

Score
10/10
orcusratspywarestealer

Malware Config

Targets

    • Target

      Release.rar

    • Size

      20.8MB

    • MD5

      5cc2b4b8cb72a593f59bd7673519ebd5

    • SHA1

      44a44f9c5030ad8b33a96ea96e661e22dc3e40fa

    • SHA256

      7035d5b2091822730ef2550e6ae60358bffdfa7cfe88643251d8c8de1883d40b

    • SHA512

      8a5499e9f0b727362ecc7021b9865bcd869f2a5864439d3d99c0564bc8956f630698ae55c23e14470af519131720f6c29cfde82a344623664bedaa18e86912f1

    • SSDEEP

      393216:hcVM/SrrTB8wq73zdXKlmxB0OjM1OwjFar0knvmmYhB186lAvtszHz/F3g:QwcTB8wEh6lmxyL5BstEdg

    Score
    10/10
    orcusratspywarestealer

    • Orcus

      Orcus is a Remote Access Trojan that is being sold on underground forums.

      ratspywarestealerorcus

    • Orcus family

      orcus

    • Orcurs Rat Executable

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks