Overview
overview
7Static
static
3TurboToolsX.zip
windows11-21h2-x64
1App/AppDat...-0.dll
windows11-21h2-x64
1App/AppDat...-1.dll
windows11-21h2-x64
1App/AppDat...68.exe
windows11-21h2-x64
3App/AppDat...se.txt
windows11-21h2-x64
3App/AppData/put.exe
windows11-21h2-x64
7App/AppInf...68.ini
windows11-21h2-x64
3App/AppInf...se.txt
windows11-21h2-x64
3App/AppInf...sh.jpg
windows11-21h2-x64
App/AppInf...on.ico
windows11-21h2-x64
3App/AppInf...28.png
windows11-21h2-x64
App/AppInf...16.png
windows11-21h2-x64
App/AppInf...32.png
windows11-21h2-x64
App/AppInf...75.png
windows11-21h2-x64
App/AppInf...fo.ini
windows11-21h2-x64
3App/AppInf...se.txt
windows11-21h2-x64
3App/Readme.txt
windows11-21h2-x64
3App/license.txt
windows11-21h2-x64
3Data/setti...gs.ini
windows11-21h2-x64
3Installer-...68.exe
windows11-21h2-x64
7Password - 2026.txt
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/08/2026, 14:34
Static task
static1
Behavioral task
behavioral1
Sample
TurboToolsX.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
App/AppData/Installer-83.619.6968-0.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
App/AppData/Installer-83.619.6968-1.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
App/AppData/Installer.83.619.6968.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
App/AppData/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
App/AppData/put.exe
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
App/AppInfo/Launcher/Installer-83.619.6968.ini
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
App/AppInfo/Launcher/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
App/AppInfo/Launcher/splash.jpg
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
App/AppInfo/appicon.ico
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
App/AppInfo/appicon_128.png
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
App/AppInfo/appicon_16.png
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
App/AppInfo/appicon_32.png
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
App/AppInfo/appicon_75.png
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
App/AppInfo/appinfo.ini
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
App/AppInfo/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
App/Readme.txt
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
App/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
Data/settings/InstallerSettings.ini
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
Installer-83.619.6968.exe
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
Password - 2026.txt
Resource
win11-20260513-en
General
- Target App/AppInfo/appicon.ico
- Size 88KB
- Sample260822-rxnvmafc68
- SHA256 f4e2cd6d28e98e0624feb064b92ccdc438dca91bdf6358fde48faed94ed90ca3
- MD5 9b6cf5c6f65a252caf85dcfa6ba0e7bc
- SHA1 c2e08c9be065a99c0d6f8a34ef44a959c0d94110
- SHA512 0a7c376d3798a2dcd18e954172fcffac399fc1c306c24ce324009a16bef98f1862ec60f699f432a70579a166315fe9bd8de35384c946208cdad8c95ac6ed1a09
- SSDEEP 768:/5oqOMsN5v3ImgzFK3gkA2uFo5LEfocwA:/KqOMmM21zQfojA
- TLSH T116935B0072C7D1E2E52B4BBAA460D2B231EA7DA4BA77529274CCBFDF38F151B6611341
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4540 cmd.exe