1e02f3d7074d82d9ce76ea3dcf9a9d6fcc68f25745888c47e7eee88fd6b67cb9 | Triage™

Login
Reports

Overview

overview

6

Static

static

5

SiloAI.exe

windows10-2004-x64

6

SiloAI.exe

windows11-ltsc_2024-x64

6

bin/res.exe

windows10-2004-x64

4

bin/res.exe

windows11-ltsc_2024-x64

4

bin/tor.exe

windows10-2004-x64

3

bin/tor.exe

windows11-ltsc_2024-x64

3

version.dll

windows10-2004-x64

4

version.dll

windows11-ltsc_2024-x64

4

vresion.dll

windows10-2004-x64

1

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 10:51

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

SiloAI.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

20 signatures

150 seconds

adware defense_evasion discovery persistence privilege_escalation spyware

Behavioral task

behavioral2

Sample

SiloAI.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

20 signatures

150 seconds

adware defense_evasion discovery persistence privilege_escalation spyware

Behavioral task

behavioral3

Sample

bin/res.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

defense_evasion

Behavioral task

behavioral4

Sample

bin/res.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion

Behavioral task

behavioral5

Sample

bin/tor.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/tor.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

version.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

version.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

vresion.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
bin/tor.exe
Size 9.7MB
Sample261027-mx2dhadt6l
SHA256 1e02f3d7074d82d9ce76ea3dcf9a9d6fcc68f25745888c47e7eee88fd6b67cb9
MD5 b2f54a49b7a61bff64524bfde6d00aa1
SHA1 dad989043566a412f0c53bdee0c46bf40ad43b40
SHA512 e373bde75946c835a5f8f436ebcbb8b53379e48eed995592fbb5468a789d70ce0db6b085a5063159256e4038ce309df780ccd0cc73d9f9ee1ff8fb0cf4f89557
SSDEEP 98304:r/iXVtCslXFszsJ4IZRK0ex92eH9XwNa5y1AXgLwe7jpxTI2PC+h:ziTJ+Xh9XCaE1AX04
TLSH
T1F1A61947F27710DDC5BAC07892177223F9A13C8C81346B6B599097A22B74B68AF7EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Users\Admin\AppData\Local\Temp\bin\tor.exe
"C:\Users\Admin\AppData\Local\Temp\bin\tor.exe"
1⤵
PID:4964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cached-microdescs.new

Path C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new
Size 8.7MB
SHA256 7ee293e7a223878424c27b5b18a1e4195fa083573bc45aabfde43ae0388fc83a
MD5 342d7dde210f3799bd7cca91337b3c78
SHA1 e9ea4eebeb3af047ac45de942beb2c8472f30622
SHA512 2a83870efb7ec871efe5e60cfccc32c5a19032939ada5e2f49dbd5e72def3bcf59b503879f8dd29428b14ce7a04ae0290782fb255d540d5038bd19d09dcc79b8
SSDEEP 24576:iqYaXFEPUR1NZKyl1E232soeLUQdmoM3bCHPOdys9Ol0toz2os49QI3zRb6CnSLl:ZeXG0MC8P3dQNrb
TLSH
T1E196AED6499B04C14E08E7CDEC1613C3DF248A3E0A6041A576AAF6677F3329FC55EA39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state

Path C:\Users\Admin\AppData\Roaming\tor\state
Size 232B
SHA256 d996b0903b5bb6c9af3b0f542eb58d4b18d408bf281d19c6a23c4d6fd159d8db
MD5 fd232102f3a6aa8d63577294b2ce2eac
SHA1 3a96e7af93dd379594112d943aac35f7b4a86867
SHA512 3a5d48d4eb02d9a111ec000dc9973f95885372b78b7ef6dd3b7672de561dc1dc8fe92ccf48d5696eb68e406b11e03a92b7419ef905b1b63f17113a4a0fb47697
TLSH
T146D0A7B02976C5133D5503D59B01F4929AAAA03E414CA929720991AB20376270ACC5B5
MD5 SHA1 SHA512 TLSH

Submit Download

state

Path C:\Users\Admin\AppData\Roaming\tor\state
Size 3KB
SHA256 9c26983217c47b7a69074acd3ebe20355e06193dbf40bd5f653cc25dd33bfc8f
MD5 74713614701283096a15a8ba1b62d3fa
SHA1 900d080d7ab4a7c4f2837ea321c8997cdcec1635
SHA512 d9e4c04d9ada311ad67c7610bb044882764cb9ebc4b1aad41bfdb09130b71140bbb62b6273712b3cc19a115f7513560e4e32d4036d0d1788ed6f53e03ae5062e
TLSH
T10D81EF7AF158D60785D34AF2C40D3BC3D8A1BEAA12F075727E529799852A4037BE833C
MD5 SHA1 SHA512 TLSH

Submit Download

state

Path C:\Users\Admin\AppData\Roaming\tor\state
Size 3KB
SHA256 c4d6186f5ca372796b7499889999d800f777a5f666c1be7be5fdee1545c34df6
MD5 55f71addffa182b76087082fa0695eaf
SHA1 a65abd06cdbaec69532f051ebce5f05e531d610a
SHA512 fac1b89d17a37cd2f69d1679c6b44469f28a8ab440cebe247ff7e6c7b85fc06bc0ffb5329d09a96b1954213bcfd1790ff4f15ba1ec31adf2dc73c6dff803a9de
TLSH
T18A81F076F158D60785E34AF2C40C3BC2D8A1BEAA12F475727E529799852A4037BE833C
MD5 SHA1 SHA512 TLSH

Submit Download

unverified-microdesc-consensus

Path C:\Users\Admin\AppData\Roaming\tor\unverified-microdesc-consensus
Size 3.1MB
SHA256 422d6b922bd3fd0711292f220a26a635fa43425589260c8c290738bf7e1d7e4b
MD5 f7e4d120eba690e4222efc530e23bee3
SHA1 82e33ac12b9b5ae232ab525216dc50ffd81e8473
SHA512 b957aaa1e6028d9272b173bb4f3112e98d5d69b4b80a350a057749fdd5b08a27c2c3fd9d00da855c87d53b0dd81dcc9a8b7f670aa4653217334dc7380ad12362
SSDEEP 12288:gC8BFS+0J18ukUhxT/1Pi5/ZkTUDs6/ZCaM78o6mnX6K62rsQ25yen4r507hLFMR:gx/u18eLixOTUnNMgM6UWyQ4VY89Ecv
TLSH
T119E523EA9B124DEED32609DBE510FB7BF33F5B25C2486B94246F88EA72050D1752093D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

© 2018-2026

Terms | Privacy