orcus | 01446b9db6194d40ebe82110e181c2d49d9284b6d01535d3553ebea443fa1af0

General

Target

01446b9db6194d40ebe82110e181c2d49d9284b6d01535d3553ebea443fa1af0
Size

1.2MB
MD5

de29448441eef2844863d7910601a072
SHA1

c52d5cebde3678f6fac0ec89e045b07a8fa688be
SHA256

01446b9db6194d40ebe82110e181c2d49d9284b6d01535d3553ebea443fa1af0
SHA512

6645ba85157ef4ef9e9b4c353eb5d4eeec28be092851b61b797516b7d1536250ca3ad25e642cfd76004cd3469ddfffa8c95ea0e2df83c82cdb78386572722620
SSDEEP

24576:OVuS04YNEMuExDiU6E5R9s8xY/2l/djJ5dtsPxNGfUrIbt+rH:OVq4auS+UjfU2T95XD0Ibt+r

Score

10^/10

rat moonks orcus

Family

orcus

Botnet

Moonks

C2

99.233.198.121

Mutex

c9716ba0a1c446ee93832bf6cdb00749

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
02/04/2023 15:03:01
plugins
AgUFyfihswTdIPqEArukcmEdSF06Hw9CAFMAbwBEACAAUAByAG8AdABlAGMAdABpAG8AbgAHAzEALgAwAEEgMAAzAGMAMQBiAGUAYgAwAGIAMgA2ADcANABiADkAZQA5ADQANwBhAGIAOAA5ADQAOQBkADAANwBjAGYAYwAxAAEFyOzBvwKV1wLetwKoxrcNilV/bBUKRwBhAG0AZQByACAAVgBpAGUAdwAHAzEALgAyAEEgZAAxADkAMABlAGMAOQA5ADIAYgBmAGMANAA2ADYAOQA5AGYAMAA2ADAAOAA0AGIAMwAzADQAMgAwAGEAMAAyAAIAAAQE
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01446b9db6194d40ebe82110e181c2d49d9284b6d01535d3553ebea443fa1af0