Overview

overview

10

Static

static

10

tor-browse...14.exe

windows7-x64

7

tor-browse...14.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

1

$PLUGINSDI...em.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows7-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

1

Browser/Ac...al.dll

windows7-x64

7

Browser/Ac...al.dll

windows10-2004-x64

7

Browser/To...nt.exe

windows7-x64

1

Browser/To...nt.exe

windows10-2004-x64

1

Browser/To...rd.exe

windows7-x64

1

Browser/To...rd.exe

windows10-2004-x64

1

Browser/To...nt.exe

windows7-x64

1

Browser/To...nt.exe

windows10-2004-x64

1

Browser/To...nt.exe

windows7-x64

1

Browser/To...nt.exe

windows10-2004-x64

1

Browser/To...or.exe

windows7-x64

3

Browser/To...or.exe

windows10-2004-x64

3

localizati...ols.js

windows7-x64

3

localizati...ols.js

windows10-2004-x64

3

localizati...ols.js

windows7-x64

3

localizati...ols.js

windows10-2004-x64

3

Browser/d3...47.dll

windows10-2004-x64

1

Browser/de...efs.js

windows7-x64

3

Browser/de...efs.js

windows10-2004-x64

3

Browser/firefox.exe

windows7-x64

7

Browser/firefox.exe

windows10-2004-x64

7

Browser/fo...ar.ps1

windows7-x64

3

Browser/fo...ar.ps1

windows10-2004-x64

3

Browser/freebl3.dll

windows7-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 23:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Browser/TorBrowser/Tor/PluggableTransports/webtunnel-client.exe

  • Size

    4.1MB

  • MD5

    976b08039e0e69732d6ab8bb2e6d5c22

  • SHA1

    4f31ec2ac871fe75aac8eaf7bbaf1cc32a2c189b

  • SHA256

    b58978883f7d05f7fb59177f9e46059684145428c34c34333bb91848a6657447

  • SHA512

    ac2e7141b0e7a4ad8191185f36619a97a921bf6f571249083c910b7c8dc55ff446cb2a9186526a29f2385b475a2acb91d8bee01e3d03fcc03b54edd46417f0b4

  • SSDEEP

    49152:L37+O+4RTrb/TyvO90d7HjmAFd4A64nsfJ5Wgf/ioNayWbnOUOH7H5o24+Z5EDpD:K4RJvuyCcX4cEA5L

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Browser\TorBrowser\Tor\PluggableTransports\webtunnel-client.exe
    "C:\Users\Admin\AppData\Local\Temp\Browser\TorBrowser\Tor\PluggableTransports\webtunnel-client.exe"
    1⤵
      PID:3056

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads