Overview
overview
7Static
static
3setup.exe
windows11-21h2-x64
1$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...es.exe
windows11-21h2-x64
7$PLUGINSDI...up.exe
windows11-21h2-x64
6$PLUGINSDI...86.exe
windows11-21h2-x64
4$PLUGINSDI...86.exe
windows11-21h2-x64
4HorseLauncher.exe
windows11-21h2-x64
1tor.exe
windows11-21h2-x64
3Analysis
- max time kernel
898s - max time network
904s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/09/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/runtimes.exe
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/dxwebsetup.exe
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/vc14_x86.exe
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/vc2013_x86.exe
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
HorseLauncher.exe
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
tor.exe
Resource
win11-20260911-en
General
- Target tor.exe
- Size 9.7MB
- Sample260928-e6stqage74
- SHA256 60c45b01938c799862e511a9a5bab12f959a819c6264a24502edc342165f570c
- MD5 4edd2723154608d3d13f4c93a1c007ef
- SHA1 f064ae020b89e4bf4f0a6e6289d0560f34050ccb
- SHA512 babb21d145a6ffbaebcd18b6c839d684b9c165c00557cf0b397b4d3b0a8401a4171d2774d341eea41158f73e3ab4b99c026737e846b9d41ca6ccd5f1cd99db5b
- SSDEEP 98304:XE7pu2Nw3522D4eSYizAmIJCQKeVuOwPS1A0mYwnQjGTuPjd+u:8pu2G35EQKqwq1A02u
- TLSH T114A62947F27710DDC5BAC07892177223F9A13C9C81346B6B599097A62B70B68AF3EF14
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\tor\cached-microdesc-consensus
- Size 3.2MB
- SHA256 5eb427a66a6ff5a36076b8526a5621c682f9769c556e330cfdb2300e53455fcd
- MD5 83e387a08e0a8843aeec4d9e58b6a465
- SHA1 23a747de09219dd05e51da88e090b57ce99a418b
- SHA512 c3f3f10235a7248583edb97aaf726426da3f15e7baaa5e24087502b7f3aa7e0d8b3313b23bf4a2c74f343e9a14478a1f2ce0bdc7bcb096e59d6aa181519a2cd8
- SSDEEP 24576:LdktEU+ucpotPfXYxF6TYQRb6YBGrjJoIh:B2+rwXcZCSh
- TLSH T186F543EA97124DFAD32A09DBE510FB7BF33F5725C2486B94286F48FA7205091762093D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new
- Size 13.5MB
- SHA256 2519adc25171ddd05427b19ea03bfad528b1c63458e5f8001581e6db98434655
- MD5 4a00c0e4b0c51df6275d77e7c3440ba9
- SHA1 c0bb88c30a488596402c73ce0596d2f6425aa933
- SHA512 3fa5c55f962b4022e662421ecbba9ea1af63e0b2a606828c072c529966aa3f963501c04fe2c945e4d5c907ceab78c2fcf8f1944e696ac0405617bc34189a2aed
- SSDEEP 24576:B2PVQVwVfVlVbMOV9VmRVgGVlV+SeVOVyuVhV+5VHVn0QVTjVgn4Js/VJVTR5Vz7:B7TtRGJfoBZ
- TLSH T1D8E6AEDA89AB00D14E05E7CDED2607C3DF144B3A0B6041A176AAB5677F3329FC15EA39
- MD5 SHA1 SHA512 SSDEEP TLSH