f4048faea4c26e0241104ebb6cb0979937532961737ea5d87e5387196a8116ae

Analysis

user interaction
yes
max time kernel
1799s
max time network
1115s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
03/08/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tor-browser-windows-x86_64-portable-15.0.14.exe
Size 108.2MB
Sample260803-ej4bya1zaz
SHA256 f4048faea4c26e0241104ebb6cb0979937532961737ea5d87e5387196a8116ae
MD5 d810c28f342aac427d9ab41dfc918805
SHA1 0d0c43bfad2dd37a6550eeef51de6467c8d5e6f0
SHA512 2aaef58efe0adf9c6a8bfca7494e0e1af856561ffaa5d42b44ef5458ddc91a634e973740fdd5a365bdfa0d659d8ebc872a1e8e64fc3c118fbf26ee59b8955f2c
SSDEEP 3145728:YaC/QSYPDbtsPa+7pmXosvqKBnK+dt6FLLi1LyT8E:mJQDeC+7pmXoVKBXd81LiVyT8E
TLSH
T1D448335C81C9569AC27C9B3B0185DA13C67799F34760BEBE638374AE00AD4C274F876B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4696	tor-browser-windows-x86_64-portable-15.0.14.exe
4696	tor-browser-windows-x86_64-portable-15.0.14.exe
4696	tor-browser-windows-x86_64-portable-15.0.14.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\tor-browser-windows-x86_64-portable-15.0.14.exe
"C:\Users\Admin\AppData\Local\Temp\tor-browser-windows-x86_64-portable-15.0.14.exe"
1⤵
- Loads dropped DLL
PID:4696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq462E.tmp\LangDLL.dll
Size 7KB
SHA256 b797e5a7de359c0c934cddef8e9d3a78e6d3d68e6ac83d2ddad915770cbace53
MD5 48125e63f130d69025cd2bbf9f3b0c4b
SHA1 e3923a75ed00cc53e2f0b3c1843598c7c1ede79f
SHA512 5b411fc88035eafee2eed3c4e1b8c14fdb09ed09ca275ec1492d7a72dcf9cf55719dc34e63c00ca64162a455339658efc958dd2abb6dfe8a363f2f24ff3bd5be
SSDEEP 96:BLIwtgI+Wdk6guTxZlx3ojaVgmR6wP3LtrlKVNtEc+InoAhrEoUK3EMbqKh:J89uTvlx4jhaX3Lt/ch4oZ3x
TLSH
T1B5F1C70E6AC010BCFD6FC23A8D3A42157BA1F521076568DF269321553EE4FE76E356C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq462E.tmp\System.dll
Size 23KB
SHA256 4bc489ab81c6f1d7e9cc6c2e8a3157183e7b0ee5199b4c6e8044aa32da2dea1b
MD5 8213548feab7394279d2712fc12126f5
SHA1 1ada5c813c36c66789b256da1ccacd9b85a97b4f
SHA512 3b5f96cca356bbac7a87bd2695e1b95b1c8fb6c3f059e8a9ac11724708c8aaad4f7e3e404a9be1c7354b03414b18123916c2b4772ceb033a91a8c48ee724e2a8
SSDEEP 384:ecybqzYqKbo39DihgonO/U1j/HCD3Zn/MUcD9RSSvUW6OEY3yW:lybqzfko39D6gUOMhKD3ZnkjRSSJ6O
TLSH
T1DAB23C0B3AE5047DE446C13EE6671226F6B27C412B11E4DF2761B13A3E75BF01B39698
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq462E.tmp\nsDialogs.dll
Size 13KB
SHA256 7ecc85cfcc4bde6146ed8e0067341b1a56306f94893702ee772bda8725712aeb
MD5 ff6b5961a43ba8c36434c9e707d4e6a8
SHA1 f73efb0ad4f4e9f5c716df5168f4168c2cb01ad9
SHA512 fc1da79bd1725e240f0eb259e2ae7cdd976e33f8c9b64083c9420d9a64aa2bde9251294d8cfeb70e5b93d73517c26594c04c8ebba80d9529235b02d52b0a72b3
SSDEEP 192:hVoR5bH/o9gAXCI6KW0fnFdFlCaYQZUhU+Cg8++9KdYI:hVQZ/omAh6uvLFlZX++9Kd3
TLSH
T1C252D7132AC100A9FC5BC17B99BB55228ED5F6100B5131DF026662463D72FE57B3D9EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4696-194-0x00007FF92CEF7000-0x00007FF92CEF8000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads