Overview
overview
7Static
static
3TurboToolsX.zip
windows11-21h2-x64
1App/AppDat...-0.dll
windows11-21h2-x64
1App/AppDat...-1.dll
windows11-21h2-x64
1App/AppDat...68.exe
windows11-21h2-x64
3App/AppDat...se.txt
windows11-21h2-x64
3App/AppData/put.exe
windows11-21h2-x64
7App/AppInf...68.ini
windows11-21h2-x64
3App/AppInf...se.txt
windows11-21h2-x64
3App/AppInf...sh.jpg
windows11-21h2-x64
App/AppInf...on.ico
windows11-21h2-x64
3App/AppInf...28.png
windows11-21h2-x64
App/AppInf...16.png
windows11-21h2-x64
App/AppInf...32.png
windows11-21h2-x64
App/AppInf...75.png
windows11-21h2-x64
App/AppInf...fo.ini
windows11-21h2-x64
3App/AppInf...se.txt
windows11-21h2-x64
3App/Readme.txt
windows11-21h2-x64
3App/license.txt
windows11-21h2-x64
3Data/setti...gs.ini
windows11-21h2-x64
3Installer-...68.exe
windows11-21h2-x64
7Password - 2026.txt
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/08/2026, 14:34
Static task
static1
Behavioral task
behavioral1
Sample
TurboToolsX.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
App/AppData/Installer-83.619.6968-0.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
App/AppData/Installer-83.619.6968-1.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
App/AppData/Installer.83.619.6968.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
App/AppData/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
App/AppData/put.exe
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
App/AppInfo/Launcher/Installer-83.619.6968.ini
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
App/AppInfo/Launcher/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
App/AppInfo/Launcher/splash.jpg
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
App/AppInfo/appicon.ico
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
App/AppInfo/appicon_128.png
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
App/AppInfo/appicon_16.png
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
App/AppInfo/appicon_32.png
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
App/AppInfo/appicon_75.png
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
App/AppInfo/appinfo.ini
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
App/AppInfo/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
App/Readme.txt
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
App/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
Data/settings/InstallerSettings.ini
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
Installer-83.619.6968.exe
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
Password - 2026.txt
Resource
win11-20260513-en
General
- Target App/AppData/Installer.83.619.6968.exe
- Size 17.6MB
- Sample260822-rxnvmafc68
- SHA256 c1c84e86807e1a0f0594fae6883f904c958710e8dbeb760249fcc59eec9e9949
- MD5 58b991179f8d4da130a15fbf7c6a5dbe
- SHA1 bfd37182cd581be0f605fea0e15d5fd39fd3d1be
- SHA512 46bbdb276f0fca102748a9f3e524f2588190c26986622a9caea82d444ad7e9bd7da953d40269346e46b561ccf35c577fccfc4a57930f7c47047939bfbedb97ac
- SSDEEP 393216:ouwsDosgM/q+Yv5Yr+ecWxkN0StzZX1zVmEAI9:TDosgM/q+Yv5Yr+ecY6zZlvAI9
- TLSH T14D079D13B6D301E1E9A3567004FB622B5637AA12873089CBF25C3A546F732D17B377A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Installer.83.619.6968.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 692 Installer.83.619.6968.exe 692 Installer.83.619.6968.exe