TURNEDUP — Malware Profile

TURNEDUP is a non-public backdoor. It has been dropped by APT33's StoneDrill malware.

MITRE ATT&CK techniques (6)

• T1055.004 Asynchronous Procedure Call
• T1059.003 Windows Command Shell
• T1082 System Information Discovery
• T1105 Ingress Tool Transfer
• T1113 Screen Capture
• T1547.001 Registry Run Keys / Startup Folder

IntelFusions coverage

• APT33: Iran's IRGC-Linked Espionage Group Targets Aviation, Energy, and Defense Across Three Continents 2026-02-16

Attributed threat actors

• APT33

Read the full analysis on IntelFusions