General

  • Target

    dasdafwdafhua.exe

  • Size

    839KB

  • Sample

    250109-t2fe6avjet

  • MD5

    c68281e7519194a373b234d7939c20b5

  • SHA1

    675d330ae5a970d75f71cc4c0e676cc5eb2cc8fd

  • SHA256

    2fec3d688aca3acb2e8334575291bc07b7d24232a94c1c1e6d05bc74cc9250c7

  • SHA512

    5511f634b2e40ace4174fb04e3c408e28d01ec1824b9f0f75d4606ff5c2761b4dd6b30192d2a38421ac8bdcd657bf48da7e644083a1166d65a34eddc4e67b109

  • SSDEEP

    24576:cBS04YNEMuExDiU6E5R9s8xY/2l/dGtnIbt+rc:cj4auS+UjfU2TGdIbt+r

Score
10/10

Malware Config

Extracted

Family

orcus

C2

?sleepyyasian-37412.portmap.host

Mutex

a35dfe6048aa4ebdb8c3144464124e6f

Attributes
  • administration_rights_required

    false

  • anti_debugger

    false

  • anti_tcp_analyzer

    false

  • antivm

    false

  • autostart_method

    1

  • change_creation_date

    false

  • force_installer_administrator_privileges

    false

  • hide_file

    false

  • install

    false

  • installation_folder

    %appdata%\Microsoft\Speech\AudioDriver.exe

  • installservice

    false

  • keylogger_enabled

    false

  • newcreationdate

    01/09/2025 13:02:20

  • plugins

    AgEAAA==

  • reconnect_delay

    10000

  • registry_autostart_keyname

    Audio HD Driver

  • registry_hidden_autostart

    false

  • set_admin_flag

    false

  • tasksch_name

    Audio HD Driver

  • tasksch_request_highest_privileges

    false

  • try_other_autostart_onfail

    false

aes.plain

Targets

    • Target

      dasdafwdafhua.exe

    • Size

      839KB

    • MD5

      c68281e7519194a373b234d7939c20b5

    • SHA1

      675d330ae5a970d75f71cc4c0e676cc5eb2cc8fd

    • SHA256

      2fec3d688aca3acb2e8334575291bc07b7d24232a94c1c1e6d05bc74cc9250c7

    • SHA512

      5511f634b2e40ace4174fb04e3c408e28d01ec1824b9f0f75d4606ff5c2761b4dd6b30192d2a38421ac8bdcd657bf48da7e644083a1166d65a34eddc4e67b109

    • SSDEEP

      24576:cBS04YNEMuExDiU6E5R9s8xY/2l/dGtnIbt+rc:cj4auS+UjfU2TGdIbt+r

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks