Essential information

Value / Name

https://centrogauchodabahia123.com/altor/installer.msi

Confidence

100/100

Revoked

Yes

Valid from

02/12/2025 15:45

Valid until

31/12/2025 21:27

Pattern type

stix

Published

20/12/2025 20:02

Modified

31/12/2025 21:28

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://centrogauchodabahia123.com/altor/installer.msi']

Labels / Tags

Labels: ai-enhanced anti-sandbox backdoor banking trojan brazil casbaneiro metamorfo multi-format attacks powershell python whatsapp

Marking (TLP)

TLP:CLEAR