Overview

overview

8

Static

static

3

tcp-tor.exe

windows10-2004-x64

8

tcp-tor.exe

windows11-ltsc_2024-x64

1

Resubmissions

23/10/2026, 13:56

261023-q82eesb12y3

23/10/2026, 13:26

261023-qpy5yssw7p3

23/10/2026, 13:17

261023-qjsqzsysb18

Sharing

Copy URL Twitter E-mail

General

  • Target
    tcp-tor.exe
  • Size 627KB
  • Sample261023-qjsqzsysb1
  • SHA256 017eb9fa30e20361564f2ea8a6db8a7d275e8798f7de64b62f99af0d9ee97981
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryransomware

Malware Config

Targets

    • Target
      tcp-tor.exe
    • Size 627KB
    • SHA256 017eb9fa30e20361564f2ea8a6db8a7d275e8798f7de64b62f99af0d9ee97981
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryransomware

    • Downloads MZ/PE file

    • Uses Wuauclt to proxy-execute a DLL

      Wuauclt is the Windows Update Auto Update Client. It can load update deployment providers to run a malicious DLL under a trusted Windows process.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks