Analysis
-
max time kernel
30s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
13-01-2023 11:42
General
-
Target
data/tor/tor.exe
-
Size
3.9MB
-
MD5
52faae579cc30d277fddf60ea4b89e2c
-
SHA1
f2010f4451c7aac3c767a5743370d9252bbbfd7c
-
SHA256
c4ee142394bf7a53e43ca86ab3c03e3712d85c15941588fc4e6e8f5c7a88c654
-
SHA512
3baec48c1718f2252ce788b3832d3adf145f93c3a9e6e6aeabde6d5d5d52bde32c450c46b1385961bf201c30f60570319897f614428414534867af6bf93f16a4
-
SSDEEP
98304:CzZ42i53gAUP71HtcjRkVfQIjiEsgYY9l7:KOaA0HtcjKVfQIb
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\data\tor\tor.exe"C:\Users\Admin\AppData\Local\Temp\data\tor\tor.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
764KB
-
Filesize
3.9MB
-
Filesize
128KB
-
Filesize
764KB
-
Filesize
2.6MB
-
Filesize
780KB
-
Filesize
3.9MB
-
Filesize
3.9MB