Overview

overview

10

Static

static

10

tmp.exe

windows10-2004-x64

1

Resubmissions

11/04/2025, 09:39

250411-lmsg6svxgs10

03/03/2023, 06:22

230303-g41snafh7y1

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp
  • Size 21KB
  • Sample250411-lmsg6svxgs
  • SHA256 1870f51321d0301b3047137721b79e2a207d2b935fdac7fca4dd23a970cbce3e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
turtleloader

Malware Config

Signatures

  • Detects TurtleLoader 1 IoCs
  • Turtleloader family
    turtleloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • tmp
    .exe 21KB

tmp

  • IMPHASH 7b57069f99d986d6c9ef48b4abe307ee
  • SHA256 1870f51321d0301b3047137721b79e2a207d2b935fdac7fca4dd23a970cbce3e
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx64arch:x64

  • Detects TurtleLoader

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
9864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Encry\OneDrive\Desktop\FilelessPELoader-main\FilelessPELoader-main\FilelessPELoader\x64\Release\FilelessPELoader.pdb