Overview

overview

7

Static

static

3

Orbit Installer.exe

windows10-2004-x64

7

Orbit Installer.exe

windows11-ltsc_2024-x64

7

bot.pyc

windows10-2004-x64

3

bot.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Orbit Installer.exe
  • Size 75.2MB
  • Sample260722-mdwc5sshrb
  • SHA256 9261f1e9ff53a2bf0c19549c72095a7f2958c8f8a0cf3628fafa8390262bbff9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
executionpyinstaller

Malware Config

Targets

    • Target
      Orbit Installer.exe
    • Size 75.2MB
    • SHA256 9261f1e9ff53a2bf0c19549c72095a7f2958c8f8a0cf3628fafa8390262bbff9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2
    • Target
      bot.pyc
    • Size 56KB
    • SHA256 95a8f4e14271b7ae3afaabf28749784f0b85133e7e96e108993e520edec7df88
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks