Overview
overview
3Static
static
1TurboType-...ommand
ubuntu-18.04-amd64
3TurboType-...ommand
debian-9-armhf
3TurboType-...ommand
debian-9-mips
3TurboType-...ommand
debian-9-mipsel
3TurboType-...o Type
macos-10.15-amd64
1_bootlocale.pyc
windows10-2004-x64
3_bootlocale.pyc
windows11-ltsc_2024-x64
3_collections_abc.pyc
windows10-2004-x64
3_collections_abc.pyc
windows11-ltsc_2024-x64
3_weakrefset.pyc
windows10-2004-x64
3_weakrefset.pyc
windows11-ltsc_2024-x64
3abc.pyc
windows10-2004-x64
3abc.pyc
windows11-ltsc_2024-x64
3codecs.pyc
windows10-2004-x64
3codecs.pyc
windows11-ltsc_2024-x64
3collection...__.pyc
windows10-2004-x64
3collection...__.pyc
windows11-ltsc_2024-x64
3collections/abc.pyc
windows10-2004-x64
3collections/abc.pyc
windows11-ltsc_2024-x64
3copyreg.pyc
windows10-2004-x64
3copyreg.pyc
windows11-ltsc_2024-x64
3encodings/...__.pyc
windows10-2004-x64
3encodings/...__.pyc
windows11-ltsc_2024-x64
3encodings/aliases.pyc
windows10-2004-x64
3encodings/aliases.pyc
windows11-ltsc_2024-x64
3encodings/ascii.pyc
windows10-2004-x64
3encodings/ascii.pyc
windows11-ltsc_2024-x64
3encodings/...ec.pyc
windows10-2004-x64
3encodings/...ec.pyc
windows11-ltsc_2024-x64
3encodings/big5.pyc
windows10-2004-x64
3encodings/big5.pyc
windows11-ltsc_2024-x64
3encodings/...cs.pyc
windows10-2004-x64
3General
- Target TurboType-v1.0-Mac.zip
- Size 7.3MB
- Sample260830-24849abj91
- SHA256 6318e834d715cfd3f7a099cc2eaa3ed7cb88b58bbef835a04bc3dec91ac33059
- MD5 a735986f8c20f31ba266597ddf6781fe
- SHA1 28795545c51a1dd4022cd722e90a0072dd9dd71d
- SHA512 be1720da1daf146c38104f494b9d6f14658496e24fdcaf2dbcc0a15f9afe5cd95272969fc2115113562c371fbf6969d3db1580df0f0ac327f0f05e6d205107be
- SSDEEP 98304:YIOZisQKMQjHuFdRqb4oc4vJXQhEi697p9bFuPbfYWPlXViEvSZQjREIwauddraN:UZis5r0qbbtA6B3bFuzYWtc2Jwae9aN
- TLSH T11176F040BAA26DD7FD09F27C411A8A1C4B6A9339DB49D513794FC35C3F4B3E40E22A99
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
TurboType-v1.0-Mac/Turbo Type v10.app/Contents/MacOS/Turbo Type
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
_bootlocale.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
_bootlocale.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
_collections_abc.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
_collections_abc.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
_weakrefset.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
_weakrefset.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
abc.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
abc.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
codecs.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
codecs.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
collections/__init__.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
collections/__init__.pyc
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral18
Sample
collections/abc.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
collections/abc.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
copyreg.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
copyreg.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
encodings/__init__.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
encodings/__init__.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
encodings/aliases.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
encodings/aliases.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
encodings/ascii.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
encodings/ascii.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
encodings/base64_codec.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
encodings/base64_codec.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
encodings/big5.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
encodings/big5.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
encodings/big5hkscs.pyc
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target TurboType-v1.0-Mac/Install Turbo Type.command
- Size 428B
- SHA256 db14ed4b2888a8033168da8f492f27fb521b0dd98a91f0c1aabc6b5f67f6a0cf
- MD5 f06dcfd9e22742194af4d3db07e9bcc5
- SHA1 206e0133a99b52fc66525c75269c2a2da07fb7b2
- SHA512 7509b3fce838b4b8ac47894fdce0943fe69aacd743f18457f7d3f62a10c9e0c53aa5bf3ff48ceab3389e35b0836f32a6c2bc4a774610c86671bc6bfd4f56ea85
- TLSH T1BDE092E73982C464150706BE9FA514F87C40511B07011C39A11F81B346047EF76AD791
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target TurboType-v1.0-Mac/Turbo Type v10.app/Contents/MacOS/Turbo Type
- Size 2.2MB
- SHA256 b8398925483d1010d23dc8694682b27aa39dca23552179f75bb0015a8d3a635a
- MD5 65dc36a33116472ac064006f39060800
- SHA1 3a51040d4901d5767c80d450dc8801feeb0d270d
- SHA512 d2349601ef8316ecd3389df6e785e9cddc4152184d5ed28d5baf9a95ca29a9d954504f058ca39032ece451836ab4ae25e5a9ee015396850d8d8f18c03dd0d6cd
- SSDEEP 49152:jtbZN8kI9hog7fktVsz9pNf9JcutqfvzQ/1toGEafQZC9wZWS:jtbFIrffcmzzNFG+kvMdtoGEUS
- TLSH T11BB53385EF4D482BF2FA307A8C04D7709933E5FF9F5761B78028944E15DABA230A6671
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _bootlocale.pyc
- Size 1KB
- SHA256 a3df46b5f6f8969822d3dad925cdc2bf77b5cae39fb7796a34460a6d6fe9310d
- MD5 bde84dc1bd1b8bafeb4016821e91bf8b
- SHA1 42e0412909297b1b341f7b2c820ec640df64ee01
- SHA512 412d2fed80806dae655bbfd8abd29bb7d06905f5280b9900dd1690e505725499d12aca5939c98b1b9bdcf1418227261bff2d30b82474dfe378c13004bbbffe25
- TLSH T1B72100022F409D57FD40FBF07A45936C4BB799248A1FAE492607827A3C0F2BD6D416CA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target _collections_abc.pyc
- Size 30KB
- SHA256 294c8ae67891dd8ad78acad901625c4ce9ce9a2dd498f6432dcea1fc79c183ad
- MD5 5cfd869740996476dff3142e215ea524
- SHA1 1dd7a93454f943df88f430528bcf437ff617da90
- SHA512 7b765a08ae571a06148436f4d670e87474f3ada91d79c2b209d8c24d6f85871142cd061b8bd8afdeb9fff067f58c6a9fe3a07e337c3b19f7920e914229e40c31
- SSDEEP 768:5SvtYa/zcohhLTdSzGEMtcimoS3g0V78iQWoc:5EtYarcojPdSCtcimoS3g0KiQWJ
- TLSH T1F1E22E5172A16DBFFF89F27A401AC13CA7339635E30A96573C0F846D3E2A2804B59E94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _weakrefset.pyc
- Size 7KB
- SHA256 cb9a59a892e86f83fb9945f5a5e61bd81056b2a18517026a2388c0b2133f8cc5
- MD5 39caee541b684ccef10fa7e85697b3cd
- SHA1 4735e002cee0751169afe06fcffd33fd6609d54e
- SHA512 be4394812851c128a8e684458c615f8e2366a68246328afb4ee9c14d888b2d1b1ed8dcaadf000ae3961744c06923bdfe53b72cac45164da23d91a9d4d4c751db
- SSDEEP 192:xf0NiYh3iKreweZGslbIvlrj4RdJ5hr+6bMhE6EXuXnw4FS4SYY5sCiHzGx/w6Jl:JAXhyKiweZGsVIvl/4RdJ5hr+6bAE6E5
- TLSH T148F1F2846D9DAC86F85DF3B4D275435DF1278232C2DE8B03542BD0BF6E4E3E85946889
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target abc.pyc
- Size 5KB
- SHA256 484f630af716adebf9ed9579088b63fb2eec873fbd7b7e2cdaaad848d0e82a9b
- MD5 3c59f586cb1016bb950949e053ec1b11
- SHA1 6c42c0868e5902fa10e452321521b522e3060e33
- SHA512 85c52b626c021d62580b2ed37ef49ad3571a5c74a415ea346217bd5c0f48cdd3c4b5300b3d0c4b462e12d50847e7bc7d78bf5e680ac3f1fcef937ce066419759
- SSDEEP 96:aCx06+Se5PAossyS+3G77xQIQppTRUlSx0z1p23HPGvR+3RUNMeOGo9o2Ueooivk:a2+dPAossU2sRUlis1p2uvRyRUCeOGo9
- TLSH T106C1420E7BD3E8F7FDCAF23B541E885DA6175223C31A5A16BEDF02581F0A5D541E2260
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target codecs.pyc
- Size 33KB
- SHA256 b06467a98a1aeaac78417cb70d1589854d3643ccd1f8312d7df0b33465f77376
- MD5 2d15b91c07d0e6646a0eaa35aff7896e
- SHA1 c3c0e3061fb36a9b727be293e963aba24646e3b3
- SHA512 6e6e04eb0984d6573e36f2f7165b23d481121c6efce02f760e614d6fa87a318b8c432bf94675dc8f0509b923234e7f5fc5e2318e7e182f313cb82502a191d03e
- SSDEEP 768:Nwk5O1w4gouvScZBYUgAWEom/eSpaZI8K3nWxkpl8h:NnWSXpaZIV3nWxkpah
- TLSH T194E294427F973AD7FD01F1B6804BDA98921DA637931D4823388E831D3F6A59C8C725B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target collections/__init__.pyc
- Size 46KB
- SHA256 c2483938a34142114864e8fd65c84aa70615e320c17663dab766b44728fd1eb7
- MD5 04819dc874ba39d3b26b70b60e0acfe7
- SHA1 d7837da673fb454bcaa9cae8bf17cbc78a770c76
- SHA512 5f9cbb5378ba317e7b0f4ca262f991c7ac1b6beb894ef197b7d77bda932d54b6120ece24d589bb216a07031760a5146502946c058c290eec36b3407fa98a87de
- SSDEEP 768:F4/hFPlGzFDyavieCMbWDRBPou+eQ5IVvLbGmhojSNb4QgHCmtlbcZ6pq9shmf5S:F4pFg5DyadCPDRBPoJIVvLbGmhoONUQK
- TLSH T1A123950072A6AD9BF985F2BC135A8248E3799376D36A431B787FC03D2F5B1E54E11D88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target collections/abc.pyc
- Size 283B
- SHA256 268debde3ff105139846607ddaec0152a7a09a49efe70c724fe79b0ed6c89cd2
- MD5 6b645a106094998f0bed610f28ace8c0
- SHA1 0e4a4202d15d057613dc1699969c64197742ba2e
- SHA512 f6c98d9272102d71c2b5afebc64629484dee5ac0cc2082c902f5872c20927a10c938e8d04ff98750179983b1230814d7dd7055a214ff4ec35be35e3870c8ef02
- TLSH T10DD095713511E3B5F35DF27A41DBB5654430E5D2474102177F14675C0C3D3611E848CD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target copyreg.pyc
- Size 4KB
- SHA256 f34001bea1dd32804bac70aeedbedbd3262473486c6d77eae4ec07f26f65d13c
- MD5 05517d3c9cb3cd7c338358877b7729d8
- SHA1 3e458ccf378b4f059ea76adf53c1f5b25746dbab
- SHA512 45e41ff2f65eef83fdd7cfd38c2a118605f6dbab7987d87d7f7185ac358f206fdfb88474313d36217c267a3023a2c07ac3a9d0baf0f9a673ac9cab09d2ddb1ae
- SSDEEP 96:qiU3NlLHfjOe53q0FyJHktpQdzqvVl0bl4fqm4JYHjmTny7H3TEh:z6bHfv5Kt204Vl2Wfh4JYHjmTy7H3TEh
- TLSH T14591D515BE807A87FFD6F039C10A4211E75AD73AF2C495B730EBC11E0D4D2A4EA52A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target encodings/__init__.pyc
- Size 3KB
- SHA256 55ef64a518941f24c564b00a215cef4bf213d99747fe082daa9a24067f66431f
- MD5 a73eb44b4a511a4e1e53046bc3f268f6
- SHA1 02a79f677910c2855eeb96d24d7493081dada3ee
- SHA512 bd29ccee919dbe74d4af5f7fa2a84945c4470575642439e1a83e80581a365a619b4216e04eca2e471b8462f3aac66c90a06adfb9da5b477cc6d0c0499c24f717
- TLSH T1D681D587F6E00903EDA594B4715FCA48816C706373382CCE3DAD83AA1FC91A155D26AE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target encodings/aliases.pyc
- Size 6KB
- SHA256 2591535a882f16c8afd9180eb34ae8733b94763ec289e9e772e0a58dbf5cd892
- MD5 392ee7658a5652ad218a80477952dd6c
- SHA1 c5ccc7697179ac81669536e59a3d88c2e97ab159
- SHA512 f7990a79e8ca64babb475f83efaee1a695bcbd7e9cd705be9b3438152ab30451de390082313bb4caf1a1d34a3e65b9dfc50392215dab28ba6e37cfc9be423203
- SSDEEP 192:FkL+mjC0A1235V1eRfa2h/b0Fyq1a1qOqqqqqqq1qqqqq11qUt2qq85qq5qO555q:cTjCa/MhQyq1a1qOqqqqqqq1qqqqq11i
- TLSH T11AD182C1C0E07D73789422B519FE6ADBC12D20C5BB0C77B978EFD8980634BA5B64D866
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target encodings/ascii.pyc
- Size 1KB
- SHA256 872a4d12aca8a062cbfbdcd4bd1c8ca9375baded92f226e23c792ac2f51c451d
- MD5 dda2f0e9dca3e3fa952238d2e9c0acf1
- SHA1 2b4cee754ce0356a60b217033b357986f2ebbe6c
- SHA512 0194fc8ddbbb6cbc0389c367b7ab1ac0830d0bb3c5bb621f599170de3779bdcb041cd94e4ae4f92ac25830b6d0c52e7d4e83f00889ad32db53c138f83d6fd3dc
- TLSH T108310CC06EDF1E82F90CF2BAC17EDA2C4A9B0378C2495F073E13C25B394E5E02920509
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target encodings/base64_codec.pyc
- Size 2KB
- SHA256 a31f9d83b5925a409fc3f3ab9a777f044521952e71b75cf7996676139d316ef9
- MD5 3830cec57e9b64a6e9cd18af555d10ef
- SHA1 76187a6c8fe9e407bffa4f169284ba6acf149c40
- SHA512 f335116c4e1adb54a9bf252768deea030aa5984510fd8bcf228d2090c47c1444c313a1318cd0d35972f5817c2ed3daad309881274ee891410103cae16b4930f7
- TLSH T1BF419940BA816DDDFE49F2B842CD8E2C0A5E933DDA05FA4B7F47D27A284A2D52C1151C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target encodings/big5.pyc
- Size 1KB
- SHA256 00b364e1c486e6652fe6fe7d3c5dc4953797772d72eb44305ea09c3432715104
- MD5 156bda8a577d57978237952082bb1c9e
- SHA1 5593ad6bb767018bdd5ddb59681a6a845b15ed40
- SHA512 d4baa79194a149e15379dd95d32cff2574d0ce9db353090e2d4e7e551502c8f9c1c03a6783b184feb4d17365cabe6a82dd4bd69f81703beb525c3965c015ec12
- TLSH T14C21CEC25A8356EAFC49F53D47AE8E1C1A8F52BCDE2870036F83C6192E4C5E42C1060C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target encodings/big5hkscs.pyc
- Size 1KB
- SHA256 d774a0b43b53036a5093ce6b2f527b0a6982a4ab38e17ffc958fd91f0ae5198f
- MD5 c2a9d5e0fd96d3a1d113de6896009367
- SHA1 8fc566a8b649e7b8ed685e244ce2fb8f4a2d475b
- SHA512 b34d75979dec20d6c23d2d5bd7c40da95b62a19d32e3d683c7b0bc7f97b98ffd836b593942b7b479d310e6565e58943e5532092e78e0d36bcc79205c33210342
- TLSH T1E0219EC65A8756DAFD49F53E47AE8E1C1A4B52BCDE2871036F83D6592F4C9E42C1050C
- MD5 SHA1 SHA512 TLSH
Score3/10