Overview

overview

10

Static

static

What is a sox.exe

windows10_x64

10

Resubmissions

13-06-2022 00:03

220613-ab3m8agfg8 10

16-05-2022 03:16

220516-dshk6aeadk 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    What is a sox.7z

  • Size

    1.9MB

  • Sample

    220613-ab3m8agfg8

  • MD5

    4750b764c38c6b0b3f28ede944fdca2a

  • SHA1

    7d1245d59feecae546a02c62149d78c6e3186de6

  • SHA256

    8f9db949c11d775ead140f4e9198a1dad03eb12bfcbae43e852613dee573aec9

  • SHA512

    8d68abd39f5a65958181ee8385e7f58325985ffb100c2c4a69b5b91f64f1879c145267e1708450fadc23c6e3952399dddcdfe047db9780ee48f15a2de124939d

Score
10/10
jupyterbackdoorstealertrojan

Malware Config

Extracted

Family

jupyter

C2

http://146.70.81.82

Targets

    • Target

      What is a sox.exe

    • Size

      278.0MB

    • MD5

      f6a360ff5cc2fad625a18ab7064ea05d

    • SHA1

      5002176424bbebae11e12e144d10ebe06719beae

    • SHA256

      237270198970db6ed7e9e8c5bcc01127431da6ae5c71c01df958b8cc9292232e

    • SHA512

      10e692fb6f2cc4ebcef2bf45418a72f8aabb1312e2ed8714dbc9d6d253b675fe5b589d1c6a2e91f6d85dc22115139209255bf14dc00fbfbf91072930ca780de8

    Score
    10/10
    jupyterbackdoorstealertrojan

    • Jupyter, SolarMarker

      Jupyter is a backdoor and infostealer first seen in mid 2020.

      backdoortrojanstealerjupyter

    • Executes dropped EXE

    • Drops startup file

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks