Is a real investigation even possible? CIA leaks indicate they have tools to conceal the US origins of their malware and inject Chinese/Arabic/Russian etc text to fool forensic investigators
https://wikileaks.org/vault7/#Marble%20Framework
Well if a state couldn't conceal origin they aren't very good, but there are always markers..