TeamPCP Malware Hash Match

Ethan Andrews@eandrews

•updated Feb 20, 2026•6•0•79

Detects the presence or execution of known TeamPCP malware and infrastructure tools (proxy.sh, kube.py, pcpcat.py, and tunneling tools like FRPS/gost) based on their MD5 file hashes. The group uses these standardized payloads to automate their operations.