Turian

ATP Sandbox Adv. Heuristics

Stats

First seen: June 2024
Last seen: September 2026

MITRE ATT&CK techniques

18 techniques across 6 tactics.

TA0002 Execution

T1059Command and Scripting Interpreter
- T1059.004Unix Shell
- T1059.006Python
- T1059.003Windows Command Shell

TA0003 Persistence

T1547Boot or Logon Autostart Execution
- T1547.001Registry Run Keys / Startup Folder

TA0005 Stealth

T1027Obfuscated Files or Information
T1036Masquerading
- T1036.004Masquerade Task or Service
T1140Deobfuscate/Decode Files or Information

TA0007 Discovery

T1016System Network Configuration Discovery
T1033System Owner/User Discovery
T1082System Information Discovery
T1083File and Directory Discovery
T1120Peripheral Device Discovery

TA0009 Collection

T1074Data Staged
- T1074.001Local Data Staging
T1113Screen Capture
T1560Archive Collected Data
- T1560.001Archive via Utility

TA0011 Command and Control

T1001Data Obfuscation
- T1001.001Junk Data
T1071Application Layer Protocol
- T1071.001Web Protocols
T1105Ingress Tool Transfer

Associated groups

G0135BackdoorDiplomacy

Alert name variants

Alert Name	Engine
Win32.Trojan.Turian	ATP Sandbox Adv. Heuristics

Related families

InvisiMole PlugX Machete QakBot Zebrocy