Overview

overview

8

Static

static

URLScan

urlscan

1

https://www.torproje...

windows7-x64

1

https://www.torproje...

windows10-2004-x64

8

Resubmissions

03/01/2023, 10:27

230103-mg6y2sed3w 8

03/01/2023, 09:56

230103-lyltrsba72 8

03/01/2023, 09:49

230103-ltql6aec3x 8

03/01/2023, 09:46

230103-lrvs4aba59 8

03/01/2023, 09:39

230103-lmydesba56 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.torproject.org

  • Sample

    230103-lyltrsba72

Score
8/10
evasiontrojan

Malware Config

Targets

    • Target

      https://www.torproject.org

    Score
    8/10
    evasiontrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks