General
-
Target
altas installer.exe
-
Size
87.5MB
-
Sample
250208-nxtjbsspgt
-
MD5
e1c8bc131cc1502e31dec5146351c557
-
SHA1
95792a7ed9bec9bccf88b3ecdffe1a06fb72b8ef
-
SHA256
214c22cc13004c4e5c7b6ef898d2c354acc6a27eb5125d8ff783c5e0b6508e06
-
SHA512
b5807f60f1c5d6fde557c7c27b5424e57eefe7c8c1a962f3949f3a412603f94dfb26eb18e30bd5e1ebbf705a9ef6ccd7d51fe4a74d9d525d1382257b19f4eac0
-
SSDEEP
1572864:z2GKlEWCsm/OkiqOv8im2AUdfmE7qliwiYgj+h58sMwhue9DOVwJq:znKe3sm/OknOv8i3XfCwy51ueV6
Behavioral task
behavioral1
Sample
altas installer.exe
Resource
win10ltsc2021-20250207-en
Malware Config
Targets
-
-
Target
altas installer.exe
-
Size
87.5MB
-
MD5
e1c8bc131cc1502e31dec5146351c557
-
SHA1
95792a7ed9bec9bccf88b3ecdffe1a06fb72b8ef
-
SHA256
214c22cc13004c4e5c7b6ef898d2c354acc6a27eb5125d8ff783c5e0b6508e06
-
SHA512
b5807f60f1c5d6fde557c7c27b5424e57eefe7c8c1a962f3949f3a412603f94dfb26eb18e30bd5e1ebbf705a9ef6ccd7d51fe4a74d9d525d1382257b19f4eac0
-
SSDEEP
1572864:z2GKlEWCsm/OkiqOv8im2AUdfmE7qliwiYgj+h58sMwhue9DOVwJq:znKe3sm/OknOv8i3XfCwy51ueV6
Score9/10-
Enumerates VirtualBox DLL files
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-