Overview
overview
10Static
static
10tor-browse...14.exe
windows7-x64
7tor-browse...14.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
1$PLUGINSDI...LL.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
1$PLUGINSDI...em.dll
windows10-2004-x64
1$PLUGINSDI...gs.dll
windows7-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
1Browser/Ac...al.dll
windows7-x64
7Browser/Ac...al.dll
windows10-2004-x64
7Browser/To...nt.exe
windows7-x64
1Browser/To...nt.exe
windows10-2004-x64
1Browser/To...rd.exe
windows7-x64
1Browser/To...rd.exe
windows10-2004-x64
1Browser/To...nt.exe
windows7-x64
1Browser/To...nt.exe
windows10-2004-x64
1Browser/To...nt.exe
windows7-x64
1Browser/To...nt.exe
windows10-2004-x64
1Browser/To...or.exe
windows7-x64
3Browser/To...or.exe
windows10-2004-x64
3localizati...ols.js
windows7-x64
3localizati...ols.js
windows10-2004-x64
3localizati...ols.js
windows7-x64
3localizati...ols.js
windows10-2004-x64
3Browser/d3...47.dll
windows10-2004-x64
1Browser/de...efs.js
windows7-x64
3Browser/de...efs.js
windows10-2004-x64
3Browser/firefox.exe
windows7-x64
7Browser/firefox.exe
windows10-2004-x64
7Browser/fo...ar.ps1
windows7-x64
3Browser/fo...ar.ps1
windows10-2004-x64
3Browser/freebl3.dll
windows7-x64
1Analysis
-
max time kernel
292s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
02/05/2024, 23:08
Behavioral task
behavioral1
Sample
tor-browser-windows-x86_64-portable-13.0.14.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
tor-browser-windows-x86_64-portable-13.0.14.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Browser/AccessibleMarshal.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral10
Sample
Browser/AccessibleMarshal.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Browser/TorBrowser/Tor/PluggableTransports/conjure-client.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral12
Sample
Browser/TorBrowser/Tor/PluggableTransports/conjure-client.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral14
Sample
Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Browser/TorBrowser/Tor/PluggableTransports/snowflake-client.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
Browser/TorBrowser/Tor/PluggableTransports/snowflake-client.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Browser/TorBrowser/Tor/PluggableTransports/webtunnel-client.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral18
Sample
Browser/TorBrowser/Tor/PluggableTransports/webtunnel-client.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Browser/TorBrowser/Tor/tor.exe
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral20
Sample
Browser/TorBrowser/Tor/tor.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
localization/hu/devtools/client/perftools.js
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
localization/hu/devtools/client/perftools.js
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
localization/id/devtools/client/perftools.js
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral24
Sample
localization/id/devtools/client/perftools.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Browser/d3dcompiler_47.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Browser/defaults/pref/channel-prefs.js
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral27
Sample
Browser/defaults/pref/channel-prefs.js
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Browser/firefox.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral29
Sample
Browser/firefox.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Browser/fonts/NotoSansNKo-Regular.ps1
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral31
Sample
Browser/fonts/NotoSansNKo-Regular.ps1
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Browser/freebl3.dll
Resource
win7-20240221-en
windows7-x64
General
-
Target
$PLUGINSDIR/System.dll
-
Size
25KB
-
MD5
480304643eee06e32bfc0ff7e922c5b2
-
SHA1
383c23b3aba0450416b9fe60e77663ee96bb8359
-
SHA256
f2bb03ddaeb75b17a006bc7fc652730d09a88d62861c2681a14ab2a21ef597ce
-
SHA512
125c8d2ccbfd5e123ce680b689ac7a2452f2d14c5bfbb48385d64e24b28b6de97b53916c383945f2ff8d4528fef115fbb0b45a43ffa4579199e16d1004cf1642
-
SSDEEP
384:aZyRQ9dweQ9XYD/isN7lCEjgw4U/ktKi+RIcq1uCJOz3cDv+doYD:aR9dYIrx7lC7TU/kaG1uCJ43cb
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3048 wrote to memory of 1296 3048 rundll32.exe 28 PID 3048 wrote to memory of 1296 3048 rundll32.exe 28 PID 3048 wrote to memory of 1296 3048 rundll32.exe 28