tmp0b35yukd

Classification: Malicious

tmp0b35yukd is a trojan (Windows executable, 33.5 KB). Flagged by 61% of antivirus engines (45 detections). Linked to Turla activity.

Detection summary

  • 45 antivirus detections (61% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-04-11 17:15:03 2023-04-11 17:15:03
Backdoor.Turla Hybrid-Analysis 2021-01-07 17:45:14 2021-01-07 17:45:14 G0010 Turla

Tags

apt ruag windows-server-utility

Sample information

Filenames
tmp0b35yukd, bd48c953163785c5f682b742ea5b25a611b2bf551a1dd36fb8abb2c07d9189de
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
34304 bytes
MD5
22149a1ee21e6d60758fe58b34f04952
SHA-1
0cba3b59e90c367a44a1bbee67330f5dcfe0c1e4
SHA-256
bd48c953163785c5f682b742ea5b25a611b2bf551a1dd36fb8abb2c07d9189de
First indexed
2021-01-07 17:45:14
Last updated
2026-10-09 03:18:10

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.5173993
FireEyeTrojan.Generic.5173993
McAfeeSpy-Agent.gm
CylanceUnsafe
VIPREInfostealer.Bancos
AlibabaBackdoor:Win32/Turla.8d4f706b
SymantecTrojan.Turla
APEXMalicious
AvastWin32:Turla-P [Trj]
ClamAVWin.Trojan.5173993-1
KasperskyBackdoor.Win32.Turla.bb
BitDefenderTrojan.Generic.5173993
NANO-AntivirusTrojan.Win32.Turla.doduai
AegisLabTrojan.Win32.Turla.m!c
TencentWin32.Trojan.Spnr.Hnay
Ad-AwareTrojan.Generic.5173993
TACHYONBackdoor/W32.Turla.34304
SophosMal/Generic-S
F-SecureTrojan.TR/Gendal.5173993
ZillyaBackdoor.Turla.Win32.16
McAfee-GW-EditionSpy-Agent.gm
EmsisoftTrojan.Generic.5173993 (B)
IkarusTrojan.Gendal
GDataTrojan.Generic.5173993
JiangminBackdoor.Turla.f
WebrootW32.Malware.Gen
AviraTR/Gendal.5173993
Antiy-AVLTrojan[Spy]/Win32.Luzia
KingsoftWin32.Troj.Generic.v.(kcloud)
ArcabitTrojan.Generic.D4EF2E9
ZoneAlarmBackdoor.Win32.Turla.bb
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 85)
ALYacTrojan.Generic.5173993
MAXmalware (ai score=100)
ESET-NOD32a variant of Win32/Agent.NRN
YandexBackdoor.Turla!p6llLzRh7FI
eGambitUnsafe.AI_Score_96%
MaxSecureTrojan.Malware.1930354.susgen
AVGWin32:Turla-P [Trj]
Cybereasonmalicious.ee21e6
PandaGeneric Malware
Qihoo-360Win32/Trojan.2d6
LionicTrojan.Win32.Turla.m!c

Process list

NameCommand line
tmp0b35yukd.exe
bd48c953163785c5f682b742ea5b25a611b2bf551a1dd36fb8abb2c07d9189de.exe