Overview

overview

10

Static

static

10

OrcusRAT-main.zip

windows10-2004-x64

10

Resubmissions

20/09/2026, 13:14

260920-qgxl6avv8l10

20/09/2026, 13:04

260920-qbdxvsxshw10

20/09/2026, 13:03

260920-qadkpshm9v10

Sharing

Copy URL Twitter E-mail

General

  • Target
    OrcusRAT-main.zip
  • Size 22.5MB
  • Sample260920-qbdxvsxshw
  • SHA256 d1bafae47f15af6522ab52f17860a01a22b037d5343357ecfa786194357fdf02
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
orcusadwarediscoveryexecutionratspywarestealer

Malware Config

Extracted

Family

  • orcus

Targets

    • Target
      OrcusRAT-main.zip
    • Size 22.5MB
    • SHA256 d1bafae47f15af6522ab52f17860a01a22b037d5343357ecfa786194357fdf02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    adwarediscoveryexecutionorcusratspywarestealer

    • Family: Orcus

      Orcus is a Remote Access Trojan that is being sold on underground forums.

      ratspywarestealerorcus

    • Loads dropped DLL

    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks