Analysis

  • max time kernel
    124s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250217-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/03/2025, 14:35

General

  • Target

    OrcusRAT/server/data/a94f5f3c-37c5-40dc-a55f-c56b7fdcba8a.dll

  • Size

    1.5MB

  • MD5

    d49bbcf52fe93e9123ca4db9456ea3c5

  • SHA1

    0dc2169eb1ee61315abe432d465c4028ec58d199

  • SHA256

    8b245e0499064d33e7797b88246ad7ade7382f1700b550c8cdf2cf146b2e0b57

  • SHA512

    1ec9116369357886522b07ed587be44cf0f4a2899fddd676d3223567fe07fd40f74bfcd84f656c558b188d3c09ad8054aa2461e4b4e236eb0e551a245539249c

  • SSDEEP

    24576:GrXhagX91MItueGGOUcTdad9mPcOxHXJNFYByiOlq2Wv50KID:IxaPIXo0uZJNFDo2W6KID

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\OrcusRAT\server\data\a94f5f3c-37c5-40dc-a55f-c56b7fdcba8a.dll,#1
    1⤵
      PID:3028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads