Extracted

• • Target

    installer-release (1).exe

  • Size

    302.2MB

  • MD5

    febc6d336543eef46a3443630eeb4fd9

  • SHA1

    9980a09285f878181ba03d50a22ec70ec33d7f3a

  • SHA256

    777cb8aae1e77e841b4981965198f62e60e55a4f910120980dc5ad997ab71fb5

  • SHA512

    b05607c33d732b5fe34a5017a6fdfea9681e304fa0fa80275a0bcaca98fe8595144622c8e4d40c36c1f84d5656d4e12f01f219f6297a2b09be4e3330a47ec59d

  • SSDEEP

    24576:guiIU/dvO49gI2wfnNwfORVwhNxrqOOJpb5sVE:gUmB9OANA7NZOX+VE

  Score

  10^/10

  jupyterbackdoorstealertrojan

  • Jupyter, SolarMarker

    Jupyter is a backdoor and infostealer first seen in mid 2020.

    backdoortrojanstealerjupyter

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1