Overview

overview

8

Static

static

3

TurboVPN_setup.exe

windows7-x64

8

TurboVPN_setup.exe

windows10-2004-x64

6

Driver32/d...01.sys

windows7-x64

1

Driver32/d...01.sys

windows10-2004-x64

1

Driver32/d...01.sys

windows7-x64

1

Driver32/d...01.sys

windows10-2004-x64

1

Driver32/libeay32.dll

windows7-x64

1

Driver32/libeay32.dll

windows10-2004-x64

1

Driver32/l...-1.dll

windows7-x64

3

Driver32/l...-1.dll

windows10-2004-x64

3

Driver32/lzo2.dll

windows7-x64

1

Driver32/lzo2.dll

windows10-2004-x64

1

Driver32/ssleay32.dll

windows7-x64

1

Driver32/ssleay32.dll

windows10-2004-x64

1

Driver32/vpncore.exe

windows7-x64

1

Driver32/vpncore.exe

windows10-2004-x64

1

NewClientD...dl.exe

windows7-x64

6

NewClientD...dl.exe

windows10-2004-x64

8

Retention.exe

windows7-x64

1

Retention.exe

windows10-2004-x64

1

TurboVPN.exe

windows7-x64

6

TurboVPN.exe

windows10-2004-x64

6

TurboVPNLauncher.exe

windows7-x64

6

TurboVPNLauncher.exe

windows10-2004-x64

6

WebView2Loader.dll

windows7-x64

1

WebView2Loader.dll

windows10-2004-x64

3

WinSparkle.dll

windows7-x64

1

WinSparkle.dll

windows10-2004-x64

1

breakpad.dll

windows7-x64

3

breakpad.dll

windows10-2004-x64

3

core/tun2socks.exe

windows7-x64

1

core/tun2socks.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    14s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 01:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Driver32/vpncore.exe

  • Size

    832KB

  • MD5

    26f55b75e92ddef3af96ffe53b04906d

  • SHA1

    d37ca606a6ee18ea22d6a2c0861c89b7d63d8d92

  • SHA256

    2a78b03a4581109bbc02934b18531fc747adde6339a2753b9f15c59edb258cd6

  • SHA512

    aeff8b9f9b669feec5bf1112b67c28614c6009b58013784ace4d2fc34e5b25adea28f83828395bd8ecf74cd6c2a419c344d8d7e8c94d4f6d4db10a50e60ddd25

  • SSDEEP

    24576:lnLQr5y565qEENN6ngcB4C0Y6nZx+LUFEtbh/B:lLQr5UEE7bc0Ykr0hp

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Driver32\vpncore.exe
    "C:\Users\Admin\AppData\Local\Temp\Driver32\vpncore.exe"
    1⤵
      PID:2096

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads