General
- Target TurboVPN.exe
- Size 352KB
- Sample260803-qdcgtabn9v
- SHA256 7eb24707600170c5c5cf1ca00e94d5e0850c8b0a092e336747f3a17496335990
- MD5 c8a1ae195b1f6a49c903176e27637e63
- SHA1 80906834b7fafc77abb6aa9bfe689f3a0edc92c6
- SHA512 9e1cc4b9585f68487cef2e6fa0dcbcb0fa75d5e707c8eeeb0b2c8de0f37e0e09717e0e94944132f4d118fe197d2b6fd7acb17197124fd69a6f336996f0067c65
- SSDEEP 6144:c7fr7oOCcqnZeHJlqHHC3xueSi2zINwd5j102btS1/gga2Ba1Ovd6KCauLuNg7O4:ofr7oOCcoeHJKIM0D1/gga2Ba1Ovd6Kw
- TLSH T11574DC8C366476DFCD5BC972CAA81C64EB6074BB634BA343A01715ED9E0C997DF180E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
TurboVPN.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
TurboVPN.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target TurboVPN.exe
- Size 352KB
- SHA256 7eb24707600170c5c5cf1ca00e94d5e0850c8b0a092e336747f3a17496335990
- MD5 c8a1ae195b1f6a49c903176e27637e63
- SHA1 80906834b7fafc77abb6aa9bfe689f3a0edc92c6
- SHA512 9e1cc4b9585f68487cef2e6fa0dcbcb0fa75d5e707c8eeeb0b2c8de0f37e0e09717e0e94944132f4d118fe197d2b6fd7acb17197124fd69a6f336996f0067c65
- SSDEEP 6144:c7fr7oOCcqnZeHJlqHHC3xueSi2zINwd5j102btS1/gga2Ba1Ovd6KCauLuNg7O4:ofr7oOCcoeHJKIM0D1/gga2Ba1Ovd6Kw
- TLSH T11574DC8C366476DFCD5BC972CAA81C64EB6074BB634BA343A01715ED9E0C997DF180E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.