Overview

overview

8

Static

static

3

alt.app.installer.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    alt.app.installer.exe

  • Size

    98.6MB

  • Sample

    241023-wrhhwawakj

  • MD5

    196134e5075359e914d4ecb7608b6fef

  • SHA1

    76c9a646f0e0640de24d8d1bd8c82d1b54032a12

  • SHA256

    f0ceb800f99d4bed220501325affeeae16c6bcd0cc6cbc674b646c375e5017b2

  • SHA512

    7f909780a96dfba1440666ac0512e9d065523069ee1efa2962a03de8f23e3f5af4856662220541a3d41c60fac84637c169b8a3ba7ce311cadbf123a3b4487675

  • SSDEEP

    1572864:fziv4pbMTlAu3xPgbPJOZqg4zPzHXvMBSY+cb4lnBy1Fx1e5/8Wgp2GNm9d5E0Yw:mv4ehAu3ybQMPrvqXInBCW/8WgK9/Ene

Score
8/10
microsoftdefense_evasiondiscoveryphishingpyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      alt.app.installer.exe

    • Size

      98.6MB

    • MD5

      196134e5075359e914d4ecb7608b6fef

    • SHA1

      76c9a646f0e0640de24d8d1bd8c82d1b54032a12

    • SHA256

      f0ceb800f99d4bed220501325affeeae16c6bcd0cc6cbc674b646c375e5017b2

    • SHA512

      7f909780a96dfba1440666ac0512e9d065523069ee1efa2962a03de8f23e3f5af4856662220541a3d41c60fac84637c169b8a3ba7ce311cadbf123a3b4487675

    • SSDEEP

      1572864:fziv4pbMTlAu3xPgbPJOZqg4zPzHXvMBSY+cb4lnBy1Fx1e5/8Wgp2GNm9d5E0Yw:mv4ehAu3ybQMPrvqXInBCW/8WgK9/Ene

    Score
    8/10
    microsoftdefense_evasiondiscoveryphishingpyinstallerspywarestealerupx

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Detected potential entity reuse from brand MICROSOFT.

      phishingmicrosoft

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks