Overview
overview
7Static
static
3horse museum.rar
windows11-ltsc_2024-x64
7cfg.hors
windows11-ltsc_2024-x64
3setup.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3HorseLauncher.exe
windows11-ltsc_2024-x64
1tor.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
300s - max time network
303s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 10:38
Static task
static1
Behavioral task
behavioral1
Sample
horse museum.rar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral2
Sample
cfg.hors
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral6
Sample
HorseLauncher.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
tor.exe
Resource
win11ltsc2024-20260911-en
General
- Target tor.exe
- Size 9.7MB
- Sample260930-mphleszhpg
- SHA256 60c45b01938c799862e511a9a5bab12f959a819c6264a24502edc342165f570c
- MD5 4edd2723154608d3d13f4c93a1c007ef
- SHA1 f064ae020b89e4bf4f0a6e6289d0560f34050ccb
- SHA512 babb21d145a6ffbaebcd18b6c839d684b9c165c00557cf0b397b4d3b0a8401a4171d2774d341eea41158f73e3ab4b99c026737e846b9d41ca6ccd5f1cd99db5b
- SSDEEP 98304:XE7pu2Nw3522D4eSYizAmIJCQKeVuOwPS1A0mYwnQjGTuPjd+u:8pu2G35EQKqwq1A02u
- TLSH T114A62947F27710DDC5BAC07892177223F9A13C9C81346B6B599097A62B70B68AF3EF14
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\tor\cached-microdesc-consensus
- Size 3.2MB
- SHA256 405a636583b49070249d69352b5103d80885b2425a0a6ec7e51b10dd5250cba9
- MD5 5e29b2f96bd916f7382869dd654979b9
- SHA1 c9254c2b9b8f5936613faea3e4636c72bd95c785
- SHA512 0496d8c17749a5b7f921fb186f55d8ef1b808c57ef15848d8e7756368a522a56028e3e5201b2ffaad140531d05ccb3d4c5864d277acdce30208688ab90149517
- SSDEEP 12288:/0ox4nXZpBsNU8/yieTmEZdK3/vTasMZdX40mO+YeV7p0KlBnNVk2tDRuCCA1VF:/jyn5sR/imEZdm+sYd40m77p5vbDZCGr
- TLSH T1E9F543EA97124DFAD32A09DBE510FB7BF33F5725C2486B94286F48FA7205091762093D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new
- Size 15.1MB
- SHA256 e1495e2a3c4b8044d1e62aa1d1fe01eed99272451699ae34840d803f0671db86
- MD5 96f529950ac6a6f53d7b1603f3fcbb14
- SHA1 609c3da2c1ce09ce2e66f01a85df9e40ab5cba61
- SHA512 803bdef737b6c72a408b56c7ebc747f32b539af6bda8343afbba515f64ff89f67307bbf2e3b3a93c7ea701550ede79936b754ed86833fe3667c68c2fa95b3e69
- SSDEEP 24576:7bFd8iPyfq8CJDHDH1+tD0iQCSq9M7SWnX4sZKDI0aHfBW+hncdGkRZA/bzGUJzq:vp9HHsoBT1gaPq
- TLSH T128F6AEDA899B04C15E05E7CDEC2607C3DF144A3E0B6041A176AAB56B7F3329FC15EA39
- MD5 SHA1 SHA512 SSDEEP TLSH