0c326808cca3c22e43504dd18cde27e25dc7849d8d053fac2fb392f56e15e178

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
24/08/2024, 05:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

tor-browser-windows-x86_64-portable-13.5.2.exe
Size

100.6MB
MD5

a79a66061164937ea2976056c14cb2fa
SHA1

9ad78ba00544232098527a5449a58514d4d1184d
SHA256

0c326808cca3c22e43504dd18cde27e25dc7849d8d053fac2fb392f56e15e178
SHA512

e11b04a4959746567ca4f3f50232dcb82423fc5b901293412df92ed8db642bd179a882d0051595ee122852751db066e233ddbc6f523888fff8ca3d17dc956ae6
SSDEEP

3145728:/u5NDBxjZC5B1GfVzomxu7h1lTki2y3TtY94xOAbUF+LhCE:WU5B1glRGgiDYzn2

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2820	tor-browser-windows-x86_64-portable-13.5.2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2820	tor-browser-windows-x86_64-portable-13.5.2.exe

C:\Users\Admin\AppData\Local\Temp\tor-browser-windows-x86_64-portable-13.5.2.exe
"C:\Users\Admin\AppData\Local\Temp\tor-browser-windows-x86_64-portable-13.5.2.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
PID:2820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nso1AF2.tmp\LangDLL.dll

Filesize
7KB

MD5
d02e216c527f97b5cd320770cbe03a0d

SHA1
76a0bea3650c393341e240231cf999d11a3d8eb8

SHA256
cda679d62e2852d900f412239e7c01a64a928db6c0cc03b8fa0c1eabdfe815c4

SHA512
39d99ea0045e332f197f0d6430a71adaeaccd1c8e1028ad997ffa5527e5a0fe5dbdda62e02329ae1824abad43eedd64dbfb05a1e8e19010745bfe8d53e83d990

Download Submit