Overview

overview

10

Static

static

1

Praxair-Pr...al.exe

windows10-2004-x64

10

Resubmissions

23-11-2023 08:48

231123-kqw44ahf2s 10

24-05-2023 06:17

230524-g2jrcsbf9v 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Praxair-Prostar-Platinum-Regulator-Operating-Manual.zip

  • Size

    4.4MB

  • Sample

    231123-kqw44ahf2s

  • MD5

    cf3ca5f1fa359ce0647c1a561991d9e3

  • SHA1

    609b0229c7300c378c45fa14af244dc126f00c07

  • SHA256

    e5361beadbc83b6b1ec9a2ca69626ba99bf2eabe863d4934d7b8a80ad718ec3e

  • SHA512

    b7443665ae4429a1ac425ad50fe315960df076eed5eec0c9a4d740750334b78647d10f3f7dbe11a8c230bed15412c36590c7c20338563f32e44e3b626e69c785

  • SSDEEP

    98304:LskECK6BLV3kTcEiJZd5yiXRXVSmSGKU5pxNbsbfU7L29bU8IsYyZWX/:L1M69uoJZ1XRlQ9KpxNbsbfUSvcv

Score
10/10
jupyterbackdoorstealertrojan

Malware Config

Extracted

Family

jupyter

C2

http://146.70.86.142

Targets

    • Target

      Praxair-Prostar-Platinum-Regulator-Operating-Manual.exe

    • Size

      109.2MB

    • MD5

      3fd9d81c06743c2eaffce6995ff1e46c

    • SHA1

      4c64ea9050da098573ed0bf08a4ce285cb915465

    • SHA256

      f799e7e81b66cf7d787abc864ed82c3dc5fd2aa95c9f3d24a39c79a3741d37c1

    • SHA512

      ca57c64ff307cbf16cc4e6cfecebf50ff609de8de62d0ff5519296ecb69764af3635052d0a79318d1a43378f9a704b51b01b6556a010a1ab6f009f21d511df9d

    • SSDEEP

      49152:tpSLLUdk/rsMH0S1VaCS/8YpDAb/0tZ4DTtoJjOK/uQU14N0aCoWqGoUZfaqqAn/:tm

    Score
    10/10
    jupyterbackdoorstealertrojan

    • Jupyter, SolarMarker

      Jupyter is a backdoor and infostealer first seen in mid 2020.

      backdoortrojanstealerjupyter

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks