Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

chinese.exe

windows7-x64

10

chinese.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    chinese.exe

  • Size

    903KB

  • MD5

    07b9b87f80861417ecc3c39a23cf15c5

  • SHA1

    54c5779d0fd3962bd1f035266230b4171e0985a4

  • SHA256

    1b876b62027101592095ea04b3c9c0d3d851d004d96ca0adfdb075069b1d32b6

  • SHA512

    3e56505e7e226fc134be8123569660e711db45b8da30122b9ec24f4cdc38587f4f0abfa9a522b700c46062926c371af76659133f6ae52a27c0cab3c2c11bc017

  • SSDEEP

    24576:gam4MROxnF4HrrcI0AilFEvxHP5Uaoo1:gOMiaHrrcI0AilFEvxHPa

Score
10/10
orcus

Malware Config

Extracted

Family

orcus

C2

171.113.133.41:10134

Mutex

01a81235fcb440ecaaedd3af8fc75edd

Attributes
  • autostart_method

    Disable

  • enable_keylogger

    false

  • install_path

    %programfiles%\Orcus\Orcus.exe

  • reconnect_delay

    10000

  • registry_keyname

    Orcus

  • taskscheduler_taskname

    Orcus

  • watchdog_path

    AppData\OrcusWatchdog.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • chinese.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections