General

  • Target

    torbrowser-install-win64-12.5.6_ALL.exe

  • Size

    91.7MB

  • Sample

    230929-3wpajsgg26

  • MD5

    57ee9f68c997180a934bef1b60b6fffc

  • SHA1

    bc4b346d7129b087f62309646a7887c331c7b613

  • SHA256

    88c33af6f1963eb94683be1fecfada36d17546579098372dcad61ae2137ad7b3

  • SHA512

    720c71fed3e5a54ad9ac7216f18ff6dd5d1f3ccd83c991faaf38d1aae89042bef3586eed0f1e3caac63b8c609ad30b47b40f495c007f242b5b36cc2b5f5a480a

  • SSDEEP

    1572864:oIr7fLvm6CNOenv0hG/JV7TLTRi+HP7YyrbAEGyFW4pHdVkkfUY/0SjFmxXDiH:oInf+Oe8hG/JVfRiVyPAA84PVB/0Jc

Score
7/10

Malware Config

Targets

    • Target

      torbrowser-install-win64-12.5.6_ALL.exe

    • Size

      91.7MB

    • MD5

      57ee9f68c997180a934bef1b60b6fffc

    • SHA1

      bc4b346d7129b087f62309646a7887c331c7b613

    • SHA256

      88c33af6f1963eb94683be1fecfada36d17546579098372dcad61ae2137ad7b3

    • SHA512

      720c71fed3e5a54ad9ac7216f18ff6dd5d1f3ccd83c991faaf38d1aae89042bef3586eed0f1e3caac63b8c609ad30b47b40f495c007f242b5b36cc2b5f5a480a

    • SSDEEP

      1572864:oIr7fLvm6CNOenv0hG/JV7TLTRi+HP7YyrbAEGyFW4pHdVkkfUY/0SjFmxXDiH:oInf+Oe8hG/JVfRiVyPAA84PVB/0Jc

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks