General

  • Target
    Altos-Windows-1-9-22.exe
  • Size 35.6MB
  • Sample261002-s3vqssvbpb
  • SHA256 37ba11246d70a79be81b43cbf34964abdd7f4d4d4da0e8fb20e0024b79773897
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Altos-Windows-1-9-22.exe
    .exe 35.6MB
  • $PLUGINSDIR/InstDrv.dll
    .dll 6KB
  • $PLUGINSDIR/System.dll
    .dll 28KB
  • $PLUGINSDIR/nsExec.dll
    .dll 11KB
  • altos.dll
    .dll 110KB
  • altos.pdf
    .pdf 403KB
  • altos64.dll
    .dll 117KB
  • altoslib_14.jar
    .jar 324KB
  • altosui-fat.jar
    .jar 198KB
  • altosuilib_14.jar
    .jar 217KB
  • altusmetrum-altosui.exe
    .exe 662KB
  • altusmetrum-altosui.ico
    552KB
  • altusmetrum.cat
    8KB
  • altusmetrum.inf
    8KB
  • altusmetrum.pdf
    .pdf 20.6MB
  • application-vnd.altusmetrum.eeprom.exe
    .exe 662KB
  • application-vnd.altusmetrum.telemetry.exe
    .exe 662KB
  • cmu_time_awb.jar
    .jar 1.6MB
  • cmu_us_kal.jar
    .jar 4.7MB
  • cmudict04.jar
    .jar 873KB
  • cmulex.jar
    .jar 585KB
  • cmutimelex.jar
    .jar 1KB
  • easymega-v1.0-1.9.22.ihx
    189KB
  • easymega-v2.0-1.9.22.ihx
    187KB
  • easymega-v3.0-1.9.22.ihx
    190KB
  • easymini-outline.pdf
    .pdf 24KB
  • easymini-v1.0-1.9.22.ihx
    100KB
  • easymini-v2.0-1.9.22.ihx
    108KB
  • easymini-v3.0-1.9.22.ihx
    100KB
  • easymotor-v3-1.9.22.ihx
    86KB
  • easytimer-v1-1.9.22.ihx
    140KB
  • easytimer-v2-1.9.22.ihx
    169KB
  • en_us.jar
    .jar 849KB
  • freetts.jar
    .jar 211KB
  • jcommon.jar
    .jar 325KB
  • jfreechart.jar
    .jar 1.6MB
  • motortest.pdf
    .pdf 3.0MB
  • telebt-v3.0-1.9.22.ihx
    151KB
  • telebt-v4.0-1.9.22.ihx
    101KB
  • teledongle-v3.0-1.9.22.ihx
    77KB
  • telefireeight-v1.0-1.9.22.ihx
    140KB
  • telefireeight-v2.0-1.9.22.ihx
    140KB
  • telegps-v1.0-1.9.22.ihx
    122KB
  • telegps-v2.0-1.9.22.ihx
    133KB
  • telegps-v3.0-1.9.22.ihx
    125KB
  • telegps-v4.0-1.9.22.ihx
    132KB
  • telelco-v2.0-1.9.22.ihx
    165KB
  • telemega-outline.pdf
    .pdf 24KB
  • telemega-v1.0-1.9.22.ihx
    249KB
  • telemega-v2.0-1.9.22.ihx
    241KB
  • telemega-v3.0-1.9.22.ihx
    260KB
  • telemega-v4.0-1.9.22.ihx
    256KB
  • telemega-v5.0-1.9.22.ihx
    259KB
  • telemega-v6.0-1.9.22.ihx
    258KB
  • telemega-v7.0-1.9.22.ihx
    258KB
  • telemetrum-outline.pdf
    .pdf 24KB
  • telemetrum-v2.0-1.9.22.ihx
    195KB
  • telemetrum-v3.0-1.9.22.ihx
    187KB
  • telemetrum-v4.0-1.9.22.ihx
    191KB
  • telemetry.pdf
    .pdf 479KB
  • telemini-v1-outline.pdf
    .pdf 23KB
  • telemini-v3-outline.pdf
    .pdf 24KB
  • telemini-v3.0-1.9.22.ihx
    131KB

Altos-Windows-1-9-22.exe

  • IMPHASH f4d1e4cd7416ef83f79f7c6a038875b3
  • SHA256 37ba11246d70a79be81b43cbf34964abdd7f4d4d4da0e8fb20e0024b79773897
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:2b:ad:d8:ae:bd:48:8b:e9:c3:00:e6:33:c1:3f:ab:81:c1:f1:ee:e5:85:8a:7e:0d:cf:fc:1f:e9:73:63:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Altus Metrum\, LLC,O=Altus Metrum\, LLC,L=Colorado Springs,ST=Colorado,C=US
Minor OS version
0
Major OS version
4
Entry point
17458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths