Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2025, 14:44

General

  • Target

    OrcusRAT/orсus/orсus 9191/libraries/Exceptionless.Wpf.Signed.dll

  • Size

    25KB

  • MD5

    ef36a316751603cdcb9c3f5da42b3b60

  • SHA1

    29a40cb67bb07e53a6bd28362f3912050f1ddd18

  • SHA256

    78fdd30a20ee50f88602059f0940acc92d9bfc09bc5ebebe99372d2a5af7342a

  • SHA512

    c5efc98b648d7c946f13b2e9af1cb46eae5522a4f17482fd9fa3c95551f0e53d2a9abb4a29959652626a8df4430ddf41c2adaf95d281474a77d1307657fbec33

  • SSDEEP

    384:nfoIgNjjnx1hkuPwfkaNOAsL6L2pNLxrZfvTOtDTjzImcOFz/Ym1T9yQT0B0Am9d:nfodjjx/iLsBOtDbcsz/9NV66n

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\OrcusRAT\orсus\orсus 9191\libraries\Exceptionless.Wpf.Signed.dll",#1
    1⤵
      PID:1544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads