Tor.exe
Classification: Malicious
Tor.exe is a malicious file sample. Linked to Asyncrat malware. Reported by 1 threat source, last seen 2026-06-13. Detected by 56 antivirus engines.
Detection summary
- 56 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Asyncrat | Triage | 2026-06-13 12:55:32 | 2026-06-13 12:55:32 | malicious-activity | S1087 AsyncRAT |
Tags
asyncrat default defense_evasion discovery execution persistence ratSample information
- Filenames
- Tor.exe
- SHA-256
ba907850da827ef316309724cb3078b20e07e4bfe326ec4805ffa4ae9367e2ba- First indexed
- 2026-06-13 12:55:32
- Last updated
- 2026-09-03 00:07:38
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.AsyncRat.Marte.10 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Drp] |
| AhnLab-V3 | Trojan/Win32.RL_Generic.C3546893 |
| Alibaba | Backdoor:MSIL/AsyncRat.43d7648f |
| Antiy-AVL | Trojan[Backdoor]/MSIL.Crysan |
| Arcabit | Trojan.AsyncRat.Marte.10 |
| Avast | Win32:MalwareX-gen [Drp] |
| Avira | DR/W32.MalwareX |
| BitDefender | Gen:Variant.AsyncRat.Marte.10 |
| Bkav | W32.Malware.776FDE14 |
| CAT-QuickHeal | Backdoor.MsilFC.S13564499 |
| CTX | exe.trojan.msil |
| ClamAV | Win.Packed.Razy-9625918-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen9.56514 |
| ESET-NOD32 | MSIL/AsyncRAT.A trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.AsyncRat.Marte.10 (B) |
| F-Secure | Dropper.DR/W32.MalwareX |
| Fortinet | MSIL/AsyncRAT.A!tr |
| GData | MSIL.Trojan.PSE.16I8278 |
| Detected | |
| Jiangmin | Backdoor.MSIL.gguk |
| K7AntiVirus | Trojan ( 005678321 ) |
| K7GW | Trojan ( 005678321 ) |
| Kaspersky | HEUR:Backdoor.MSIL.Crysan.gen |
| Kingsoft | MSIL.Backdoor.Crysan.gen |
| Lionic | Trojan.MSIL.Crysan.m!c |
| Malwarebytes | Generic.Trojan.MSIL.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Trojan:Win/Generic.BCX |
| MicroWorld-eScan | Gen:Variant.AsyncRat.Marte.10 |
| Microsoft | Backdoor:MSIL/AsyncRat!atmn |
| Paloalto | generic.ml |
| Rising | Trojan.AntiVM!1.CF63 (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Fareit-FZT!C356AC3EE218 |
| Sophos | Troj/AsyncRat-B |
| Tencent | Trojan.Msil.Agent.zap |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | Fareit-FZT!C356AC3EE218 |
| TrendMicro | Backdoor.MSIL.ASYNCRAT.TL0101FE26ZZ |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CA3 |
| VBA32 | OScope.Backdoor.MSIL.Crysan |
| VIPRE | Gen:Variant.AsyncRat.Marte.10 |
| Varist | W32/MSIL_Agent.HSY.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Asyncrat.108544.D |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Webroot | W32.Malware.gen |
| ZoneAlarm | Troj/AsyncRat-B |
| alibabacloud | Rat:Win/AsyncRAT.Stub |
| huorong | Backdoor/Crysan.a |