General
- Target tor-browser-windows-x86_64-portable-15.0.14.exe
- Size 108.2MB
- Sample260803-ej4bya1zaz
- SHA256 f4048faea4c26e0241104ebb6cb0979937532961737ea5d87e5387196a8116ae
- MD5 d810c28f342aac427d9ab41dfc918805
- SHA1 0d0c43bfad2dd37a6550eeef51de6467c8d5e6f0
- SHA512 2aaef58efe0adf9c6a8bfca7494e0e1af856561ffaa5d42b44ef5458ddc91a634e973740fdd5a365bdfa0d659d8ebc872a1e8e64fc3c118fbf26ee59b8955f2c
- SSDEEP 3145728:YaC/QSYPDbtsPa+7pmXosvqKBnK+dt6FLLi1LyT8E:mJQDeC+7pmXoVKBXd81LiVyT8E
- TLSH T1D448335C81C9569AC27C9B3B0185DA13C67799F34760BEBE638374AE00AD4C274F876B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
tor-browser-windows-x86_64-portable-15.0.14.exe
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
tor-browser-windows-x86_64-portable-15.0.14.exe
Resource
win10ltsc2021-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
tor-browser-windows-x86_64-portable-15.0.14.exe
Resource
win11-20260513-en
2 signatures
900 seconds
Malware Config
Targets
-
- Target tor-browser-windows-x86_64-portable-15.0.14.exe
- Size 108.2MB
- SHA256 f4048faea4c26e0241104ebb6cb0979937532961737ea5d87e5387196a8116ae
- MD5 d810c28f342aac427d9ab41dfc918805
- SHA1 0d0c43bfad2dd37a6550eeef51de6467c8d5e6f0
- SHA512 2aaef58efe0adf9c6a8bfca7494e0e1af856561ffaa5d42b44ef5458ddc91a634e973740fdd5a365bdfa0d659d8ebc872a1e8e64fc3c118fbf26ee59b8955f2c
- SSDEEP 3145728:YaC/QSYPDbtsPa+7pmXosvqKBnK+dt6FLLi1LyT8E:mJQDeC+7pmXoVKBXd81LiVyT8E
- TLSH T1D448335C81C9569AC27C9B3B0185DA13C67799F34760BEBE638374AE00AD4C274F876B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL