Overview

overview

10

Static

static

1

AppInstaller.exe

windows7-x64

1

AppInstaller.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AppInstaller.exe

  • Size

    313.0MB

  • Sample

    240220-28414agg46

  • MD5

    6fd76fa67e9ec8390e685a3448263fd9

  • SHA1

    c81f1df0c44c0d729b0111428e846875a40170aa

  • SHA256

    2ad0f1e6aeeca47a188a04a5c858f7ef72e4449123d412d095844ee271622356

  • SHA512

    b66da387d031903815780dffeeb94b88366728599fa92ac8b8b47336c29f4f73e20b21d44f58abf4d9b667643e40a53155f52159726c6694b891434d1a97be05

  • SSDEEP

    49152:V61dzQ1n9ZKWf6yP6vnG8lP2JONqf0rjPCa5s4oGhpp:4pp

Score
10/10
jupyterbackdoorstealertrojan

Malware Config

Targets

    • Target

      AppInstaller.exe

    • Size

      313.0MB

    • MD5

      6fd76fa67e9ec8390e685a3448263fd9

    • SHA1

      c81f1df0c44c0d729b0111428e846875a40170aa

    • SHA256

      2ad0f1e6aeeca47a188a04a5c858f7ef72e4449123d412d095844ee271622356

    • SHA512

      b66da387d031903815780dffeeb94b88366728599fa92ac8b8b47336c29f4f73e20b21d44f58abf4d9b667643e40a53155f52159726c6694b891434d1a97be05

    • SSDEEP

      49152:V61dzQ1n9ZKWf6yP6vnG8lP2JONqf0rjPCa5s4oGhpp:4pp

    Score
    10/10
    jupyterbackdoorstealertrojan

    • Jupyter, SolarMarker

      Jupyter is a backdoor and infostealer first seen in mid 2020.

      backdoortrojanstealerjupyter

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks