General
- Target Orbit_MWIII.rar
- Size 10.1MB
- Sample260820-gssmxa1ang
- SHA256 da7d60ead96b5112078b82266bfb4962ca2b5bbb2cb2aa3932d80dd93135eb5e
- MD5 10fadf1931f9e40c295a9f618ea764d2
- SHA1 06a6e968474023aebe2b15ef6a56f18294b82bfb
- SHA512 10e942ca3bd530b53decf3ad0946089d6bcec5da0305153bae4440313c9774a4a111adb88e8facf63f28d7901921283f0d02d9f145a9b25428e2c6f56919984e
- SSDEEP 196608:tBf+Es33r3hKR/k65LbZZdxQhpQeA++KMyNdl1LLfVjSCvuBPLp:T0a86dbrQhpQ3++KN1nfVxuxp
- TLSH T1BFB6337534A311A02FEB4863B71FB11DBB95908B5560596C9228CC013FC5AAFE72B3F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Orbit_MWIII.rar
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Orbit_MWIII.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Orbit_MWIII.rar
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Orbit_MWIII.rar
- Size 10.1MB
- SHA256 da7d60ead96b5112078b82266bfb4962ca2b5bbb2cb2aa3932d80dd93135eb5e
- MD5 10fadf1931f9e40c295a9f618ea764d2
- SHA1 06a6e968474023aebe2b15ef6a56f18294b82bfb
- SHA512 10e942ca3bd530b53decf3ad0946089d6bcec5da0305153bae4440313c9774a4a111adb88e8facf63f28d7901921283f0d02d9f145a9b25428e2c6f56919984e
- SSDEEP 196608:tBf+Es33r3hKR/k65LbZZdxQhpQeA++KMyNdl1LLfVjSCvuBPLp:T0a86dbrQhpQ3++KN1nfVxuxp
- TLSH T1BFB6337534A311A02FEB4863B71FB11DBB95908B5560596C9228CC013FC5AAFE72B3F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Stops running service(s)
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.