General
- Target OrionPro-1.0.9-PATCHED-portable.zip
- Size 118.3MB
- Sample260905-rmgnkadp8t
- SHA256 f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061
- MD5 fbc098cb7a945eb11caa3f9d4b3c5a9e
- SHA1 34ce7d820d85ad21ddbbbb95978b4d1d56543d5d
- SHA512 173ea10f217e3ad7073448a06caa3c03e5f7c280ba4b19b0a5b5d27daa01b02de9dde89c8c7068acc05e7d30f29ea3882e15b9172f41d63156762442ab5f85fd
- SSDEEP 3145728:22HzgaEK23bAr1VaFlhT//BmQmNgFP42Di46Urv/Qmhi30:rzgaXr1VoLBmZgV42DIy/DhD
- TLSH T18448333B80E56936DA1AF9BC9EE15020FC99544E4286C9D1139C8B6B70EF6D8337BD07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OrionPro-1.0.9-PATCHED-portable.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
OrionPro-1.0.9-PATCHED-portable.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Orion Pro.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target OrionPro-1.0.9-PATCHED-portable.zip
- Size 118.3MB
- SHA256 f5e29de26e99e299c1ac993ad1f0c383f07f65636be715b3fc29e317e90da061
- MD5 fbc098cb7a945eb11caa3f9d4b3c5a9e
- SHA1 34ce7d820d85ad21ddbbbb95978b4d1d56543d5d
- SHA512 173ea10f217e3ad7073448a06caa3c03e5f7c280ba4b19b0a5b5d27daa01b02de9dde89c8c7068acc05e7d30f29ea3882e15b9172f41d63156762442ab5f85fd
- SSDEEP 3145728:22HzgaEK23bAr1VaFlhT//BmQmNgFP42Di46Urv/Qmhi30:rzgaXr1VoLBmZgV42DIy/DhD
- TLSH T18448333B80E56936DA1AF9BC9EE15020FC99544E4286C9D1139C8B6B70EF6D8337BD07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Orion Pro.exe
- Size 180.1MB
- SHA256 6c723573d915a52c872e92ff52b3d8b4d0e42e500c3570bc1870f46ddb6ca55c
- MD5 a8b0f9a719f75d4e28b11cdc7db9b8cb
- SHA1 f3c15640017a264872fb62e46bf3fcf8be9d7b8c
- SHA512 498a27da9a0ef8abc677841a4be5eaeafeb6e20a0f9e60b64d0e936295026ed2a66d73388b44e4110119d1e90d687d41d2d6c0478725f9ba913a64a79e8f0a61
- SSDEEP 1572864:FH0f0gqxb0WBFh/LVO9dyKcRmAswCXj5EtV4ga5h0q2ZOADpAyK5/Y3P8kbVr+qI:6sok+hK7
- TLSH T130988C03F39A50D9E01DD1B58B9B9633EAB1B8854324A2DF27540B512F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.