Overview
overview
3Static
static
1TurboType-...ommand
ubuntu-18.04-amd64
3TurboType-...ommand
debian-9-armhf
3TurboType-...ommand
debian-9-mips
3TurboType-...ommand
debian-9-mipsel
3TurboType-...o Type
macos-10.15-amd64
1_bootlocale.pyc
windows10-2004-x64
3_bootlocale.pyc
windows11-ltsc_2024-x64
3_collections_abc.pyc
windows10-2004-x64
3_collections_abc.pyc
windows11-ltsc_2024-x64
3_weakrefset.pyc
windows10-2004-x64
3_weakrefset.pyc
windows11-ltsc_2024-x64
3abc.pyc
windows10-2004-x64
3abc.pyc
windows11-ltsc_2024-x64
3codecs.pyc
windows10-2004-x64
3codecs.pyc
windows11-ltsc_2024-x64
3collection...__.pyc
windows10-2004-x64
3collection...__.pyc
windows11-ltsc_2024-x64
3collections/abc.pyc
windows10-2004-x64
3collections/abc.pyc
windows11-ltsc_2024-x64
3copyreg.pyc
windows10-2004-x64
3copyreg.pyc
windows11-ltsc_2024-x64
3encodings/...__.pyc
windows10-2004-x64
3encodings/...__.pyc
windows11-ltsc_2024-x64
3encodings/aliases.pyc
windows10-2004-x64
3encodings/aliases.pyc
windows11-ltsc_2024-x64
3encodings/ascii.pyc
windows10-2004-x64
3encodings/ascii.pyc
windows11-ltsc_2024-x64
3encodings/...ec.pyc
windows10-2004-x64
3encodings/...ec.pyc
windows11-ltsc_2024-x64
3encodings/big5.pyc
windows10-2004-x64
3encodings/big5.pyc
windows11-ltsc_2024-x64
3encodings/...cs.pyc
windows10-2004-x64
3Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
30/08/2026, 23:09
Static task
static1
Behavioral task
behavioral1
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral3
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral4
Sample
TurboType-v1.0-Mac/Install Turbo Type.command
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
TurboType-v1.0-Mac/Turbo Type v10.app/Contents/MacOS/Turbo Type
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral6
Sample
_bootlocale.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
_bootlocale.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
_collections_abc.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
_collections_abc.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
_weakrefset.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
_weakrefset.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral12
Sample
abc.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
abc.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
codecs.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
codecs.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
collections/__init__.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
collections/__init__.pyc
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
collections/abc.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
collections/abc.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
copyreg.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
copyreg.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
encodings/__init__.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
encodings/__init__.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
encodings/aliases.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
encodings/aliases.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
encodings/ascii.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
encodings/ascii.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
encodings/base64_codec.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
encodings/base64_codec.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
encodings/big5.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
encodings/big5.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
encodings/big5hkscs.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target TurboType-v1.0-Mac/Install Turbo Type.command
- Size 428B
- Sample260830-24849abj91
- SHA256 db14ed4b2888a8033168da8f492f27fb521b0dd98a91f0c1aabc6b5f67f6a0cf
- MD5 f06dcfd9e22742194af4d3db07e9bcc5
- SHA1 206e0133a99b52fc66525c75269c2a2da07fb7b2
- SHA512 7509b3fce838b4b8ac47894fdce0943fe69aacd743f18457f7d3f62a10c9e0c53aa5bf3ff48ceab3389e35b0836f32a6c2bc4a774610c86671bc6bfd4f56ea85
- TLSH T1BDE092E73982C464150706BE9FA514F87C40511B07011C39A11F81B346047EF76AD791
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/self/fd/0 open
Processes
-
/tmp/TurboType-v1.0-Mac/Install Turbo Type.command"/tmp/TurboType-v1.0-Mac/Install Turbo Type.command"1⤵PID:671
-
/usr/bin/clearclear2⤵PID:672
-
-
/usr/bin/dirnamedirname "/tmp/TurboType-v1.0-Mac/Install Turbo Type.command"2⤵PID:673
-
-
/bin/openopen "/tmp/TurboType-v1.0-Mac/Turbo Type v10.app"2⤵
- Reads runtime system information
PID:675
-
-
/tmp/TurboType-v1.0-Mac/Turbo Type v10.app"/tmp/TurboType-v1.0-Mac/Turbo Type v10.app"1⤵PID:676