Overview
overview
10Static
static
10Orcus RAT ...on.exe
windows7-x64
3Orcus RAT ...on.exe
windows10-2004-x64
3Orcus RAT ...ow.dll
windows7-x64
1Orcus RAT ...ow.dll
windows10-2004-x64
1Orcus RAT ...eo.dll
windows7-x64
1Orcus RAT ...eo.dll
windows10-2004-x64
1Orcus RAT ...ox.dll
windows7-x64
1Orcus RAT ...ox.dll
windows10-2004-x64
1Orcus RAT ...re.dll
windows7-x64
1Orcus RAT ...re.dll
windows10-2004-x64
1Orcus RAT ...Ex.dll
windows7-x64
1Orcus RAT ...Ex.dll
windows10-2004-x64
1Orcus RAT ...Ex.dll
windows7-x64
1Orcus RAT ...Ex.dll
windows10-2004-x64
1Orcus RAT ...ed.dll
windows7-x64
1Orcus RAT ...ed.dll
windows10-2004-x64
1Orcus RAT ...ed.dll
windows7-x64
1Orcus RAT ...ed.dll
windows10-2004-x64
1Orcus RAT ...er.dll
windows7-x64
1Orcus RAT ...er.dll
windows10-2004-x64
1Orcus RAT ...op.dll
windows7-x64
1Orcus RAT ...op.dll
windows10-2004-x64
1Orcus RAT ...it.dll
windows7-x64
1Orcus RAT ...it.dll
windows10-2004-x64
1Orcus RAT ...ib.dll
windows7-x64
1Orcus RAT ...ib.dll
windows10-2004-x64
1Orcus RAT ...rk.dll
windows7-x64
1Orcus RAT ...rk.dll
windows10-2004-x64
1Orcus RAT ...al.dll
windows7-x64
1Orcus RAT ...al.dll
windows10-2004-x64
1Orcus RAT ...ro.dll
windows7-x64
1Orcus RAT ...ro.dll
windows10-2004-x64
1Analysis
- max time kernel
118s - max time network
121s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
28/03/2025, 00:59
Behavioral task
behavioral1
Sample
Orcus RAT 1.9.1/Orcus.Administration/Orcus.Administration.exe
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral2
Sample
Orcus RAT 1.9.1/Orcus.Administration/Orcus.Administration.exe
Resource
win10v2004-20250313-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.DirectShow.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.DirectShow.dll
Resource
win10v2004-20250313-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.dll
Resource
win7-20250207-en
windows7-x64
Behavioral task
behavioral6
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.dll
Resource
win10v2004-20250313-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Be.Windows.Forms.HexBox.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral8
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Be.Windows.Forms.HexBox.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/CSCore.dll
Resource
win7-20241023-en
windows7-x64
Behavioral task
behavioral10
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/CSCore.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ControlzEx.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ControlzEx.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/DirectoryInfoEx.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral14
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/DirectoryInfoEx.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Signed.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral16
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Signed.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Wpf.Signed.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Wpf.Signed.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/FluentCommandLineParser.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral20
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/FluentCommandLineParser.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/GongSolutions.WPF.DragDrop.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/GongSolutions.WPF.DragDrop.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.AvalonEdit.dll
Resource
win7-20250207-en
windows7-x64
Behavioral task
behavioral24
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.SharpZipLib.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20250313-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Lidgren.Network.dll
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral28
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Lidgren.Network.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.IconPacks.Material.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.IconPacks.Material.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.dll
Resource
win7-20241023-en
windows7-x64
Behavioral task
behavioral32
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
General
- Target Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.SharpZipLib.dll
- Size 196KB
- Sample250328-bchj4ssl16
- SHA256 40b3d590f95191f3e33e5d00e534fa40f823d9b1bb2a9afe05f139c4e0a3af8d
- MD5 c8164876b6f66616d68387443621510c
- SHA1 7a9df9c25d49690b6a3c451607d311a866b131f4
- SHA512 44a6accc70c312a16d0e533d3287e380997c5e5d610dbeaa14b2dbb5567f2c41253b895c9817ecd96c85d286795bbe6ab35fd2352fddd9d191669a2fb0774bc4
- SSDEEP 3072:hjMibqfQqFyGCDXiW9Pp/+Tl4abpuu201PB1BBXIDwtqSPVINrAfvp1:GibqI59PpOPf201/z7p
- MD5 SHA1 SHA512 SSDEEP