Analysis

  • max time kernel
    141s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-08-2024 11:58

General

  • Target

    turbowarp-packager-extras/_internal/third-party/inno/islzma32.exe

  • Size

    86KB

  • MD5

    226e12d5c3476217529a9f38b924e13e

  • SHA1

    93aaae14937b835bf2d1c25204f4a15aef617b64

  • SHA256

    a5c78614504071581052605c5967a564839cf88923da8237204bdfc26a33ddf0

  • SHA512

    1c48dd9f57046e7a97d8226ad37f93e259ed2be8945fbb8d0b90b17f14ef9aa50070b0cf7dae853db641afcf85216218b5fff26dffd493836e601a52206c3697

  • SSDEEP

    1536:SFao9EzE9pBi+nvt9TM/ytPhx+3RB8Slbb4x9Jrw3ttIRiPWvgeDkWXi1:h0Bi+nvtBRhx+3JlbkqttIRmfakge

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\turbowarp-packager-extras\_internal\third-party\inno\islzma32.exe
    "C:\Users\Admin\AppData\Local\Temp\turbowarp-packager-extras\_internal\third-party\inno\islzma32.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads