torbrowser-install-8.0.6_pl.exe
Classification: Malicious
torbrowser-install-8.0.6_pl.exe is a malicious file sample. Linked to Tor malware. Reported by 1 threat source, last seen 2019-03-02.
Detection summary
- 1 antivirus detections (1% detection ratio)
- 0 IDS alerts
- 6 processes observed
- 6 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Tor | Hybrid-Analysis | 2019-03-02 23:15:03 | 2019-03-02 23:15:03 | S0183 Tor |
Sample information
- Filenames
- torbrowser-install-8.0.6_pl.exe
- File type
- PE32 executable (GUI) Intel 80386 (stripped to ext ...
- Size
- 57732544 bytes
- MD5
978be7d7f6d2f206760bd00174103901- SHA-1
d431839b1b942d5f545c474ac79f03200fc03502- SHA-256
43f4921f5797ec2db851d65603750094fb1a277c5065db60bb25efeca7fdcc2d- First indexed
- 2019-03-02 23:15:03
- Last updated
- 2026-04-17 05:36:23
Antivirus detections
| Engine | Detection |
|---|---|
| Panda | HackingTool/Tor |
Network contacts
212.83.154.33 81.7.11.96 5.200.21.144 86.247.49.93 81.7.9.33 192.99.34.48
Process list
| Name | Command line |
|---|---|
| torbrowser-install-8.0.6_pl.exe | |
| firefox.exe | |
| tor.exe | --defaults-torrc "%USERPROFILE%\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc-defaults" -f "%USERPROFILE%\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc" DataDirectory "%USERPROFILE%\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor" GeoIPFile "%USERPROFILE%\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip" GeoIPv6File "%USERPROFILE%\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6" HashedControlPassword 16:05bcb0f51fd57f1f60c24c5b2eaa781eb9eaa7c24c81ec5f70e26727bd +__ControlPort 9151 +__SocksPort "127.0.0.1:9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth" __OwningControllerProcess 3048 DisableNetwork 1 |
| firefox.exe | -contentproc --channel="3048.0.49810913\1568423133" -childID 1 -isForBrowser -boolPrefs 300:0| -stringPrefs 286:38;{535329d1-786a-4ed3-9f93-2fce54fed8a1}| -schedulerPrefs 0001,2 -greomni "%USERPROFILE%\Desktop\Tor Browser\Browser\omni.ja" -appomni "%USERPROFILE%\Desktop\Tor Browser\Browser\browser\omni.ja" -appdir "%USERPROFILE%\Desktop\Tor Browser\Browser\browser" 3048 tab |
| firefox.exe | -contentproc --channel="3048.6.50416586\375853155" -childID 2 -isForBrowser -boolPrefs 300:0| -stringPrefs 286:38;{535329d1-786a-4ed3-9f93-2fce54fed8a1}| -schedulerPrefs 0001,2 -greomni "%USERPROFILE%\Desktop\Tor Browser\Browser\omni.ja" -appomni "%USERPROFILE%\Desktop\Tor Browser\Browser\browser\omni.ja" -appdir "%USERPROFILE%\Desktop\Tor Browser\Browser\browser" 3048 tab |
| firefox.exe | -contentproc --channel="3048.12.921139559\623056731" -childID 3 -isForBrowser -boolPrefs 300:0| -stringPrefs 286:38;{535329d1-786a-4ed3-9f93-2fce54fed8a1}| -schedulerPrefs 0001,2 -greomni "%USERPROFILE%\Desktop\Tor Browser\Browser\omni.ja" -appomni "%USERPROFILE%\Desktop\Tor Browser\Browser\browser\omni.ja" -appdir "%USERPROFILE%\Desktop\Tor Browser\Browser\browser" 3048 tab |