044940b15c5dd4eb47c58bbd1f58f81b431ce82b6501f8744c9ae3efb26c7ae7 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

libcrypto-1_1.dll

windows10-2004-x64

3

libcrypto-1_1.dll

windows11-ltsc_2024-x64

3

libevent-2-1-7.dll

windows10-2004-x64

3

libevent-2-1-7.dll

windows11-ltsc_2024-x64

3

libevent_c...-7.dll

windows10-2004-x64

3

libevent_c...-7.dll

windows11-ltsc_2024-x64

3

libevent_e...-7.dll

windows10-2004-x64

3

libevent_e...-7.dll

windows11-ltsc_2024-x64

3

libgcc_s_sjlj-1.dll

windows10-2004-x64

3

libgcc_s_sjlj-1.dll

windows11-ltsc_2024-x64

3

libssl-1_1.dll

windows10-2004-x64

3

libssl-1_1.dll

windows11-ltsc_2024-x64

3

libssp-0.dll

windows10-2004-x64

3

libssp-0.dll

windows11-ltsc_2024-x64

3

libwinpthread-1.dll

windows10-2004-x64

3

libwinpthread-1.dll

windows11-ltsc_2024-x64

3

tor-bg.vbs

windows10-2004-x64

3

tor-bg.vbs

windows11-ltsc_2024-x64

3

tor-gencert.exe

windows10-2004-x64

3

tor-gencert.exe

windows11-ltsc_2024-x64

3

tor-real.exe

windows10-2004-x64

3

tor-real.exe

windows11-ltsc_2024-x64

3

tor.vbs

windows10-2004-x64

3

tor.vbs

windows11-ltsc_2024-x64

3

zlib1.dll

windows10-2004-x64

3

zlib1.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
tor-expert-bundle-v0.4.5.10.zip
Size 6.4MB
Sample260716-pjxt9sg17w
SHA256 044940b15c5dd4eb47c58bbd1f58f81b431ce82b6501f8744c9ae3efb26c7ae7
MD5 f4e79137ab4b7c0af7f410f87561bf23
SHA1 9412d1c5ce21f407ede88144c45e098216271db8
SHA512 b1487ff19cc0261dd2c66cd57b0b16ac7db9a0c2f4f50956b82ad84b5420a9a77ae2b126f6d39ce1731e0055d1f77eacd7c5ea2022e7f2620bb2e9cd4030ec4e
SSDEEP 98304:bOpzhgWh6LHZbUoR3eO+pZBq1OkrWo+oodFbQVWnrb3WQ4bW3U7yyf3xqq2/pB/u:Kpzp6/t09yNKFmurnz3fgRk57MV
TLSH
T1D766338586484F7CEFE292F304654A13EBF1B149DE922A14F7F44D903E73AA502E99F4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

libcrypto-1_1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

libcrypto-1_1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

libevent-2-1-7.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

libevent-2-1-7.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

libevent_core-2-1-7.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

libevent_core-2-1-7.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

libevent_extra-2-1-7.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

libevent_extra-2-1-7.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

libgcc_s_sjlj-1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

libgcc_s_sjlj-1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

libssl-1_1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

libssl-1_1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

libssp-0.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

libssp-0.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

libwinpthread-1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

libwinpthread-1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

tor-bg.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

tor-bg.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

tor-gencert.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

tor-gencert.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

tor-real.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

tor-real.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

tor.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

tor.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

zlib1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

zlib1.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  libcrypto-1_1.dll
- Size 3.5MB
- SHA256 3f08728c7a67e4998fbdc7a7cb556d8158efdcdaf0acf75b7789dccace55662d
- MD5 6d48d76a4d1c9b0ff49680349c4d28ae
- SHA1 1bb3666c16e11eff8f9c3213b20629f02d6a66cb
- SHA512 09a4fd7b37cf52f6a0c3bb0a7517e2d2439f4af8e03130aed3296d7448585ea5e3c0892e1e1202f658ef2d083ce13c436779e202c39620a70a17b026705c65c9
- SSDEEP 98304:gNuOztMCl6beK03dnwzje1UZecMioeWhuw6N7hpupY1CPwDv3uFfJUz5XlgDzCRK:AHaCl6beK03dnwzje1wecboeWhuZN7hq
- TLSH
  T155064C54FAC348FAED576EB085DBF32F1639AB009732CFA7DA046925EC23AC51519318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  libevent-2-1-7.dll
- Size 1.1MB
- SHA256 91c812a33871e40b264761f1418e37ebfeb750fe61ca00cbcbe9f3769a8bf585
- MD5 a3bf8e33948d94d490d4613441685eee
- SHA1 75ed7f6e2855a497f45b15270c3ad4aed6ad02e2
- SHA512 c20ef2efcacb5f8c7e2464de7fde68bf610ab2e0608ff4daed9bf676996375db99bee7e3f26c5bd6cca63f9b2d889ed5460ec25004130887cd1a90b892be2b28
- SSDEEP 24576:IdsuH81r7Lfml/aakxLDHGlOhRz7xiOStGX8PxUS2mmAWW:6uL0a3xLDHG8hRz7xiOzX8PxUfmt
- TLSH
  T1BC357D94F283BDFED846177941D7135F22B8E380D7269F2BAE146D34DB27BC89262205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  libevent_core-2-1-7.dll
- Size 952KB
- SHA256 abdc8cfb39d1431a1e740cf9db2bbd604cdb7a4ed79e7e0a68d814e32a296164
- MD5 686c6a9da6767287bf2e2126574fafea
- SHA1 2b0be53c4ad4b67ecdfdcd97a717de5a617f9ef0
- SHA512 3cde56ff25e53a9a04b5459113c89b8562c01b0f93e39c56bd6536824488f4f9347929935056012adaa4982cbb8a39b61ce2f17cf92ecf02295ab1a922cd4dd4
- SSDEEP 24576:aYz/U9dYQv6wbSVliNPzIqENbtFXrFKtSRvwwfu:1Za6wbSV4NPzIqENTXrFKtIvG
- TLSH
  T10F257C60F283FDBAD846077A43D7135E627DE2C0E72A9B276E147D34972BB88C263505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  libevent_extra-2-1-7.dll
- Size 667KB
- SHA256 9deb6f1776db51fa7e4e89ad2779a9f07e9f22fcb5e24481faa291d2d27e43fe
- MD5 070f988b98e9717bbd5e870a4f8c1611
- SHA1 17fb4c990c13a4fb0a2181fe139d3515ff8d96f6
- SHA512 c83d793bbe26e0297f9726b32cad5be3f92dbc36717c143ff7d55b7bd7bb20324fd86594bc626a374252656c3ee187fa4dca4c3933fe19952894042b2127a6fd
- SSDEEP 12288:39gDBeIO2+MMF5lDeXfzxjgtSMStxEX6eg5bTCubl:meh2JMF5lqXfzxUbStyX6eKnCubl
- TLSH
  T1C7E45BD4B3C3BDFAD942077D44D7535A236DE2C1932A9F276B14BD384B1ABC88672206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  libgcc_s_sjlj-1.dll
- Size 1.0MB
- SHA256 ebda776a2a353f8f0690b1c7706b0cdaff3d23e1618515d45e451fc19440501c
- MD5 bd40ff3d0ce8d338a1fe4501cd8e9a09
- SHA1 3aae8c33bf0ec9adf5fbf8a361445969de409b49
- SHA512 404fb3c107006b832b8e900f6e27873324cd0a7946cdccf4ffeea365a725892d929e8b160379af9782bcd6cfeb4c3c805740e21280b42bb2ce8f39f26792e5a1
- SSDEEP 12288:yWgvC0/HECgnPAPQPtPTPSP7PaadQ2XDPcP8PwPhP5PhP4aEPzPaPugAPnPFgtPD:tmC0/yKX1JzUBDLTl3Ibzz2rnuNY
- TLSH
  T101353C89FB49EDB7EC50067588F5234503A4E28AB3B4E677EB96BF28481335CCD5314A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  libssl-1_1.dll
- Size 1.1MB
- SHA256 c697434857a039bf27238c105be0487a0c6c611dd36cb1587c3c6b3bf582718a
- MD5 945d225539becc01fbca32e9ff6464f0
- SHA1 a614eb470defeab01317a73380f44db669100406
- SHA512 409f8f1e6d683a3cbe7954bce37013316dee086cdbd7ecda88acb5d94031cff6166a93b641875116327151823cce747bcf254c0185e0770e2b74b7c5e067bc4a
- SSDEEP 24576:JOscL0k1lOI5732OutG3c1RcJq09LrXfu1UYaP3KHl20tzVBm1X6yD50H4Ine3/p:0scn5COutG3cQJtu1UYaP3KHs0tzVBmP
- TLSH
  T182353990F687AEF6ED474ABD90D7F31E133DF240AB35CF63DA116E285E12A891245708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  libssp-0.dll
- Size 246KB
- SHA256 46541d9e28c18bc11267630920b97c42f104c258b55e2f62e4a02bcd5f03e0e7
- MD5 b77328da7cead5f4623748a70727860d
- SHA1 13b33722c55cca14025b90060e3227db57bf5327
- SHA512 2f1bd13357078454203092ed5ddc23a8baa5e64202fba1e4f98eacf1c3c184616e527468a96ff36d98b9324426dddfa20b62b38cf95c6f5c0dc32513ebace9e2
- SSDEEP 6144:DZRBjnF7ModBbDCdcJfstxzeo51aU6grhog4MmwYq55:1BJlDSkYzzugduM5
- TLSH
  T11234F9A4B6D6FEF2F9858BBD10E1135953AAA2C1EB1DE7333811FE68004DA5C8373546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  libwinpthread-1.dll
- Size 512KB
- SHA256 228fcfe9ed0574b8da32dd26eaf2f5dbaef0e1bd2535cb9b1635212ccdcbf84d
- MD5 19d7cc4377f3c09d97c6da06fbabc7dc
- SHA1 3a3ba8f397fb95ed5df22896b2c53a326662fcc9
- SHA512 23711285352cdec6815b5dd6e295ec50568fab7614706bc8d5328a4a0b62991c54b16126ed9e522471d2367b6f32fa35feb41bfa77b3402680d9a69f53962a4a
- SSDEEP 12288:/+Pm3Yv9CUauItmEz8HHLOA/TqlDCQdz9bVMPxTivFg:2Pm3Yv9CUauItmEz8HHLOA/TqluQdz9c
- TLSH
  T1D6B45BACB786BDF6F5454BBA50E2134B52EAE181E719D733BA20FD78004DB6C8233905
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  tor-bg.vbs
- Size 172B
- SHA256 816d5f7cd7c8b6ac18bd37e018a78fe95e6ee3a70ea232431c450fb4447cbf4a
- MD5 c066ae688069850e35e30eba9c0fb4ca
- SHA1 75901f0e3e8488523b901fc3f7a5f21ed307e0e5
- SHA512 1a2d40ea4d759b39de82bd3bdcf86464ca8c31f2896bcc521ed4251fc7293949930ec43b06d1742b7b71ce0faa8d78338d7557b41b6adc2b895263a837e326f7
- TLSH
  T118C08C10EC6DC580B55AE8F223F018816B888D04202AA8303351E68A5280FE1A3FA2B2
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  tor-gencert.exe
- Size 1.0MB
- SHA256 5c380138810d0cd5407095f22e6f515afccd3615f40d627774fff59865251336
- MD5 29e72f9fa2e399a00eb31a355289d082
- SHA1 0db2462212f9b4abbad9b48b87248447c28ee2f2
- SHA512 028472e6d4bc4cbdb948a9366b900c3eb0d631142cd1601bd98945af70b9c5ade2033063051f88025c341351e26da5628fb263bfc4f09cafd861bfc7d1f6cb76
- SSDEEP 12288:U0msFd0wHnfgHtubcrJfeFDmh3CUrDVX:jOwHnfgHtuQr92mh3BV
- TLSH
  T1AC25847C8B9A90EBC9805335698624CD22C43F3194F6C925965E1C5CAB7CDAB8CFB707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  tor-real.exe
- Size 4.0MB
- SHA256 e9522e6912a0124c0a8c9ff9bb3712b474971376a4eb4ca614bb1664a2b4abcf
- MD5 07244a2c002ffdf1986b454429eace0b
- SHA1 d7cd121caac2f5989aa68a052f638f82d4566328
- SHA512 4a09db85202723a73703c5926921fef60c3dddae21528a01936987306c5e7937463f94a2f4a922811de1f76621def2a8a597a8b38a719dd24e6ff3d4e07492ca
- SSDEEP 98304:7zI+VNHtad8rAiCQDE+KOzG5En1QIonPrW29hKX:H1HtadtPQDEfEn1QIbM
- TLSH
  T16116D724C10BD4B6CC452733D107A49F22B4AB339C759D1ED9482D3AFB3A952C4B7B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  tor.vbs
- Size 172B
- SHA256 fa5b02ad4ef3c6c290883a3173e53c46b024f7928835b1b53916260b156ee602
- MD5 df39e5beb63ba0dc6a84e29591bfaaa8
- SHA1 63efc259eb67d150fad9699250e383b773144e36
- SHA512 4c649e2ad35ad7119b124c8d5f78e9194e5dc4ae53dc0fffe773a28c31c6145a1a7ad2d24b3ace1368ef1165e7cecb701d14a873263f8ddbaeb478a345c743f7
- TLSH
  T163C08C10DC6EC584B55AE8F223F018816B488D00202AA8302351E68A5280FE0A3FA6B2
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  zlib1.dll
- Size 121KB
- SHA256 219d9d5bf0de4c2251439c89dd5f2959ee582e7f9f7d5ff66a29c88753a3a773
- MD5 6f98da9e33cd6f3dd60950413d3638ac
- SHA1 e630bdf8cebc165aa81464ff20c1d55272d05675
- SHA512 2983faaf7f47a8f79a38122aa617e65e7deddd19ba9a98b62acf17b48e5308099b852f21aaf8ca6fe11e2cc76c36eed7ffa3307877d4e67b1659fe6e4475205c
- SSDEEP 3072:HW7e1dL7Om0iXQmWfBoUSIgTBfHJNj9jjjjjjKeDEcz:HWCdLd4fBoUSIgTBxNj9jjjjjjKeDEc
- TLSH
  T114C36B81CAC341F2E87729F058DBEB7F4236B1128674DEB7E58C6585B633B51260A2DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy