4ca75f4de6cdf36781547b5415b84911576a8c080ef1543107d2942522a4d1e9

Login
Reports

Overview

overview

Static

static

tor-browse...1).exe

windows11-21h2-x64

$PLUGINSDI...LL.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...gs.dll

windows11-21h2-x64

Browser/Ac...al.dll

windows11-21h2-x64

Browser/To...nt.exe

windows11-21h2-x64

Browser/To...rd.exe

windows11-21h2-x64

Browser/To...or.exe

windows11-21h2-x64

chrome/dev...log.js

windows11-21h2-x64

chrome/dev...ons.js

windows11-21h2-x64

chrome/dev...nfo.js

windows11-21h2-x64

chrome/dev...age.js

windows11-21h2-x64

chrome/dev...ing.js

windows11-21h2-x64

chrome/dev...age.js

windows11-21h2-x64

Browser/d3...47.dll

windows11-21h2-x64

Browser/de...efs.js

windows11-21h2-x64

Browser/firefox.exe

windows11-21h2-x64

Browser/fo...ar.ps1

windows11-21h2-x64

Browser/freebl3.dll

windows11-21h2-x64

Browser/gkcodecs.dll

windows11-21h2-x64

Browser/lgpllibs.dll

windows11-21h2-x64

Browser/libEGL.dll

windows11-21h2-x64

Browser/libGLESv2.dll

windows11-21h2-x64

Browser/mo...ec.dll

windows11-21h2-x64

Browser/mozavutil.dll

windows11-21h2-x64

Browser/mozglue.dll

windows11-21h2-x64

Browser/nmhproxy.exe

windows11-21h2-x64

Browser/nss3.dll

windows11-21h2-x64

Browser/pl...er.exe

windows11-21h2-x64

Browser/softokn3.dll

windows11-21h2-x64

Browser/updater.exe

windows11-21h2-x64

Browser/xul.dll

windows11-21h2-x64

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/07/2026, 21:33

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

tor-browser-windows-x86_64-portable-15.0.17 (1).exe

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral2

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Browser/AccessibleMarshal.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

persistence privilege_escalation

Behavioral task

behavioral6

Sample

Browser/TorBrowser/Tor/PluggableTransports/conjure-client.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Browser/TorBrowser/Tor/tor.exe

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

suricata

Behavioral task

behavioral9

Sample

chrome/devtools/modules/devtools/client/aboutdebugging/src/components/ProfilerDialog.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

chrome/devtools/modules/devtools/client/aboutdebugging/src/components/RuntimeActions.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

chrome/devtools/modules/devtools/client/aboutdebugging/src/components/RuntimeInfo.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

chrome/devtools/modules/devtools/client/aboutdebugging/src/components/RuntimePage.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

chrome/devtools/modules/devtools/client/aboutdebugging/src/components/ServiceWorkersWarning.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

chrome/devtools/modules/devtools/client/aboutdebugging/src/components/connect/ConnectPage.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

Browser/d3dcompiler_47.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Browser/defaults/pref/channel-prefs.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Browser/firefox.exe

Resource

win11-20260513-en

windows11-21h2-x64

9 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral18

Sample

Browser/fonts/NotoSansNKo-Regular.ps1

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

Browser/freebl3.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Browser/gkcodecs.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Browser/lgpllibs.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Browser/libEGL.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Browser/libGLESv2.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Browser/mozavcodec.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Browser/mozavutil.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Browser/mozglue.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Browser/nmhproxy.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Browser/nss3.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Browser/plugin-container.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Browser/softokn3.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Browser/updater.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Browser/xul.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe
Size 17.1MB
Sample260706-1eptmshs4r
SHA256 4ca75f4de6cdf36781547b5415b84911576a8c080ef1543107d2942522a4d1e9
MD5 3c3eb38accbf0fba59cc66bdd3c806bc
SHA1 ca2643eb00c192a90ad07f6d5d217d67ce34b384
SHA512 3260cfd7637a3bd7e51a984301696773e6a86dee86127bd7d51305cdc67d8c6882bb9e7d465405703454548541fcdc7841f1580510da2194a5a26a4e29c7708d
SSDEEP 98304:jhQpqG9+1DktLs7v5oTiETk/6rpyH8Wo3+MdrmWNea9ykh5QqkfxFT/MwJq452/j:jj/1Dkt47vTVH893ddqk9ykcrYVn
TLSH
T178076C57E86501E8D1ADD570C5669223BB707C898B3223D72B60F7642F32BD0AFB9760
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5932	lyrebird.exe
5932	lyrebird.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Browser\TorBrowser\Tor\PluggableTransports\lyrebird.exe
"C:\Users\Admin\AppData\Local\Temp\Browser\TorBrowser\Tor\PluggableTransports\lyrebird.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5932

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads