Resubmissions

13-06-2022 00:02

220613-abxf7sgfg4 10

16-05-2022 11:05

220516-m6vmbabeak 8

General

  • Target

    237270198970db6ed7e9e8c5bcc01127431da6ae5c71c01df958b8cc9292232e.7z

  • Size

    1.9MB

  • Sample

    220613-abxf7sgfg4

  • MD5

    8444ebef78c58d48dd48fd0bec0a4b5e

  • SHA1

    f0a2418b8e00c648e49150bbe1428c37cfe87353

  • SHA256

    cd25e2f75f56b57a53700001ec1e368faa5b42b9db32ba4a8761317b5cfd6921

  • SHA512

    c4b1937cd14c9a062553f48bbd00405aefb493ee979d329a01feae849b5e74b650a9311429c05d5d139f117b76b7996b72f2f46af25ad54859fd5a0d471b8706

Malware Config

Extracted

Family

jupyter

C2

http://146.70.81.82

Targets

    • Target

      237270198970db6ed7e9e8c5bcc01127431da6ae5c71c01df958b8cc9292232e

    • Size

      278.0MB

    • MD5

      f6a360ff5cc2fad625a18ab7064ea05d

    • SHA1

      5002176424bbebae11e12e144d10ebe06719beae

    • SHA256

      237270198970db6ed7e9e8c5bcc01127431da6ae5c71c01df958b8cc9292232e

    • SHA512

      10e692fb6f2cc4ebcef2bf45418a72f8aabb1312e2ed8714dbc9d6d253b675fe5b589d1c6a2e91f6d85dc22115139209255bf14dc00fbfbf91072930ca780de8

    • Jupyter, SolarMarker

      Jupyter is a backdoor and infostealer first seen in mid 2020.

    • Executes dropped EXE

    • Drops startup file

MITRE ATT&CK Enterprise v6

Tasks