Extracted

• • Target

    installer-bundle.exe

  • Size

    317.1MB

  • MD5

    1977641039583fade1b370ab3c923e21

  • SHA1

    83e0825a04bb26863a5fbcf22e93df6df0478f05

  • SHA256

    5abc14737cb65a1e645bd5a2e3301b0e3e1e861a184034a6cc67ce57ee38f448

  • SHA512

    4d49651ddfddbb84e7c257e90790c802a02e54e1288920fae518c1a2f865914ba7a90ecc2a0a4f3106c2f8017ed32320a791a8e8b6eb685dd189bdf21437bee7

  • SSDEEP

    393216:XkG8OOkkGZ8Amek9iClXuv9PmcdbALPcOQe+F7oICw:X8OeGZ8A/AEhdbgNQe+xzCw

  Score

  10^/10

  jupyterbackdoorstealertrojan

  • Jupyter, SolarMarker

    Jupyter is a backdoor and infostealer first seen in mid 2020.

    backdoortrojanstealerjupyter

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1