LOLRMMTHE REMOTE ACCESS CATALOG
GitHub
Catalog / Alpemix
RMM

Alpemix

Alpemix is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category
RMM
Research authors
Nasreddine Bencherchali
Created
2024-08-05
Last modified
2024-08-05
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
AndroidLinuxWindowsiOSmacOS

Capabilities

5 Different Solutions for Remote SupportAccess to Unattended ComputersAccess to User Account Control (UAC) ScreensAdd Your Own LogoAuto SizingAutomatic UpdateClipboard TransferComputer Independent LicensingContact List and GroupsEncrypted CommunicationExternal Communication BarrierFile TransferInstant MessagingMulti-Platform SupportMultiple ChatMultiple ConnectionsNo Port Forwarding RequiredPeer to Peer Connection (p2p)Receiving Offline MessageRemote RestartReportingRestricting The AuthorityScreen SharingSending Announcement MessageSharing a certain part of the screenVideo RecordingVoice CommunicationWho is currently supporting?Working in Black Screen Mode

Executables & installation paths

Filename
Alpemix.exe
OriginalFileName
Alpemix
Description
Alpemix
Product
Alpemix
InternalName
Alpemix

Installation paths

C:\AlpemixService.exe
C:\AlpemixSrvc\

Code signing

signer name
TEKNOPARS BİLİŞİM TEKNOLOJİLERİ SANAYİ VE TİCARET LTD.ŞTİ.
certificate thumbprint
791EEC3C65240BFC4C6C3BE5469516A468DB61E9
src file sha256
6893d9ca56c9a8ff7f40cabb737996ed419b288f5bb571d6c1cc6effa9e888d9
src file path
downloaded_files/alpemix/6893d9ca56c9a8ff7f40cabb737996ed419b288f5bb571d6c1cc6effa9e888d9
src file company
Teknopars Bilisim

FORENSIC EVIDENCE

Disk artifacts

File
%localappdata%\Alpemix\Alpemix.ini
Description
N/A
OS
Windows

FORENSIC EVIDENCE

Event log artifacts

EventID
7045
ProviderName
Service Control Manager
LogFile
System.evtx
ServiceName
AlpemixSrvc
ImagePath
*\Alpemix.exe servicestartxxx
Description
Service installation event as result of Alpemix installation.

FORENSIC EVIDENCE

Registry artifacts

Path
HKLM\SYSTEM\CurrentControlSet\Services\AlpemixSrvcx
Description
N/A

FORENSIC EVIDENCE

Network artifacts

Domains
  • *.alpemix.com
Ports
  • 443
Description
N/A
Domains
  • *.teknopars.com
Ports
  • 80
Description
N/A

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_registry_sigma.yml
Description
Detects potential registry activity of Alpemix RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_network_sigma.yml
Description
Detects potential network activity of Alpemix RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_files_sigma.yml
Description
Detects potential files activity of Alpemix RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_processes_sigma.yml
Description
Detects potential processes activity of Alpemix RMM tool

References

Acknowledgements

Person
Nasreddine Bencherchali
Handle
@nas_bench