orcus | hxxps://github[.]com/Dfmaaa/MEMZ-virus | Triage

Submit
Reports

Overview

overview

Static

static

1

URLScan

urlscan

https://github.com/D...

windows10-2004-x64

Resubmissions

18/03/2025, 13:40

250318-qyhjkatydw 7

18/03/2025, 13:37

250318-qw33gsxqv5 10

18/03/2025, 13:35

250318-qvqe1atxgs 6

Sharing

General

Target

https://github.com/Dfmaaa/MEMZ-virus
Sample

250318-qw33gsxqv5

Score

10^/10

orcus discovery rat spyware stealer

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://github.com/Dfmaaa/MEMZ-virus

Resource

win10v2004-20250314-en

orcus discovery rat spyware stealer

windows10-2004-x64

16 signatures

900 seconds

Malware Config

Targets

- Target
  
  https://github.com/Dfmaaa/MEMZ-virus
Score

10^/10

orcus discovery rat spyware stealer
- Orcus
  Orcus is a Remote Access Trojan that is being sold on underground forums.
  rat spyware stealer orcus
- Orcus family
  orcus
- Orcurs Rat Executable
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

orcusdiscoveryratspywarestealer

© 2018-2025

Terms | Privacy