orcus | 1226c5766b09a5b465722d5e2b9c37d8f6900e256a53cbd922feefe10a9a4a44

General

Target

1226c5766b09a5b465722d5e2b9c37d8f6900e256a53cbd922feefe10a9a4a44
Size

1.2MB
MD5

0468061873999107d5d02acade17462b
SHA1

c7ae07074a709e65076a11fcddb2cb34e79bb49b
SHA256

1226c5766b09a5b465722d5e2b9c37d8f6900e256a53cbd922feefe10a9a4a44
SHA512

dfc1f6b8c844de33cdddfe7a4bbb579fb7a240f7e6383396ea8a46d1c3a21fe190205c6a7789eb0c26fb9218480f7c460be57f09670ee9e0e93070f80ee50624
SSDEEP

24576:P5WHS04YNEMuExDiU6E5R9s8xY/2l/dRJ5dtsPxNGfH2qIbt+re:P5Wd4auS+UjfU2T/5XD+qIbt+r

Score

10^/10

rat orcus

Family

orcus

C2

213.182.126.56

Mutex

780be458c1f747cd8f581d8d760893ad

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
01/08/2025 14:17:18
plugins
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
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1226c5766b09a5b465722d5e2b9c37d8f6900e256a53cbd922feefe10a9a4a44