Overview
overview
7Static
static
3tor-browse...15.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows11-21h2-x64
1$PLUGINSDI...em.dll
windows11-21h2-x64
1$PLUGINSDI...gs.dll
windows11-21h2-x64
1Browser/Ac...al.dll
windows11-21h2-x64
7Browser/To...nt.exe
windows11-21h2-x64
1Browser/To...rd.exe
windows11-21h2-x64
1Browser/To...nt.exe
windows11-21h2-x64
1Browser/To...nt.exe
windows11-21h2-x64
1Browser/To...or.exe
windows11-21h2-x64
3chrome/bro...w.html
windows11-21h2-x64
1chrome/bro...dow.js
windows11-21h2-x64
3Browser/d3...47.dll
windows11-21h2-x64
1Browser/de...efs.js
windows11-21h2-x64
3Browser/firefox.exe
windows11-21h2-x64
7Browser/fo...ar.ps1
windows11-21h2-x64
3Browser/freebl3.dll
windows11-21h2-x64
1Browser/ip...ts.dll
windows11-21h2-x64
1Browser/lgpllibs.dll
windows11-21h2-x64
1Browser/libEGL.dll
windows11-21h2-x64
1Browser/libGLESv2.dll
windows11-21h2-x64
1Browser/mo...ec.dll
windows11-21h2-x64
1Browser/mozavutil.dll
windows11-21h2-x64
1Browser/mozglue.dll
windows11-21h2-x64
1Browser/nss3.dll
windows11-21h2-x64
1Browser/nssckbi.dll
windows11-21h2-x64
1Browser/os...ts.dll
windows11-21h2-x64
1Browser/pl...er.exe
windows11-21h2-x64
1Browser/qipcap64.dll
windows11-21h2-x64
1Browser/softokn3.dll
windows11-21h2-x64
1Browser/updater.exe
windows11-21h2-x64
1Browser/xul.dll
windows11-21h2-x64
1Analysis
-
max time kernel
150s -
max time network
158s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
25/05/2024, 22:03
Static task
static1
Behavioral task
behavioral1
Sample
tor-browser-windows-x86_64-portable-13.0.15.exe
Resource
win11-20240426-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20240426-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20240508-en
Behavioral task
behavioral5
Sample
Browser/AccessibleMarshal.dll
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
Browser/TorBrowser/Tor/PluggableTransports/conjure-client.exe
Resource
win11-20240426-en
Behavioral task
behavioral7
Sample
Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe
Resource
win11-20240508-en
Behavioral task
behavioral8
Sample
Browser/TorBrowser/Tor/PluggableTransports/snowflake-client.exe
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
Browser/TorBrowser/Tor/PluggableTransports/webtunnel-client.exe
Resource
win11-20240426-en
Behavioral task
behavioral10
Sample
Browser/TorBrowser/Tor/tor.exe
Resource
win11-20240426-en
Behavioral task
behavioral11
Sample
chrome/browser/content/browser/migration/migration-dialog-window.html
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
chrome/browser/content/browser/migration/migration-dialog-window.js
Resource
win11-20240508-en
Behavioral task
behavioral13
Sample
Browser/d3dcompiler_47.dll
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
Browser/defaults/pref/channel-prefs.js
Resource
win11-20240426-en
Behavioral task
behavioral15
Sample
Browser/firefox.exe
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
Browser/fonts/NotoSansNKo-Regular.ps1
Resource
win11-20240508-en
Behavioral task
behavioral17
Sample
Browser/freebl3.dll
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
Browser/ipcclientcerts.dll
Resource
win11-20240426-en
Behavioral task
behavioral19
Sample
Browser/lgpllibs.dll
Resource
win11-20240426-en
Behavioral task
behavioral20
Sample
Browser/libEGL.dll
Resource
win11-20240419-en
Behavioral task
behavioral21
Sample
Browser/libGLESv2.dll
Resource
win11-20240426-en
Behavioral task
behavioral22
Sample
Browser/mozavcodec.dll
Resource
win11-20240419-en
Behavioral task
behavioral23
Sample
Browser/mozavutil.dll
Resource
win11-20240508-en
Behavioral task
behavioral24
Sample
Browser/mozglue.dll
Resource
win11-20240426-en
Behavioral task
behavioral25
Sample
Browser/nss3.dll
Resource
win11-20240508-en
Behavioral task
behavioral26
Sample
Browser/nssckbi.dll
Resource
win11-20240426-en
Behavioral task
behavioral27
Sample
Browser/osclientcerts.dll
Resource
win11-20240508-en
Behavioral task
behavioral28
Sample
Browser/plugin-container.exe
Resource
win11-20240426-en
Behavioral task
behavioral29
Sample
Browser/qipcap64.dll
Resource
win11-20240426-en
Behavioral task
behavioral30
Sample
Browser/softokn3.dll
Resource
win11-20240426-en
Behavioral task
behavioral31
Sample
Browser/updater.exe
Resource
win11-20240508-en
Behavioral task
behavioral32
Sample
Browser/xul.dll
Resource
win11-20240508-en
General
-
Target
Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe
-
Size
6.8MB
-
MD5
d13e683bf656c228e69c9d0c053b0d25
-
SHA1
da5cef24856b4561932b042b029cc12a92d18b38
-
SHA256
d53dcf8e7a2979607ecee97a4614108062e6c70717120daad664bf8447594d72
-
SHA512
55150b6c1125541cb48dd1e5117ed9379fba7f25107089b025769eaf79df06bee8e12f31846bf6a131f3a02e3ddf0846accf479b2e0560c7ae2c69faa75c1173
-
SSDEEP
49152:qqH2dzn7qrb/TIvO90d7HjmAFd4A64nsfJ2SrFDMRS6cwJNVXq7CKKCcGqdbngdh:eZkRGrVqlNongda8REosrns
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2204 lyrebird.exe 2204 lyrebird.exe