Extracted

• • Target

    Free-Blank-Business-Card-Templates.msi

  • Size

    101.8MB

  • MD5

    8213911a074f0b37b018ab4c14e5b4a5

  • SHA1

    84fbbfa8104318df77ec1b229c06b6e343bcea15

  • SHA256

    c61348ab7e5ffeb9ba5d1077b13c49bde4d841c5ada9a119f8234af89421f783

  • SHA512

    9f8baf44b58f7b79ed01c0dbb1f492b7caa651df7507e6b780278dc238645f51199fc4105b59def5e7136aa7f59f7d51740aa85eef684056b35e06b057fcc9a5

  • SSDEEP

    49152:WwxcLDe+cpl7+GgyV27HgTrztiIpqtSZFI6UUUUUUUUUUUUUUUUUUUUUUUUUUUUx:xa/MpZugTFZFIYN

  Score

  10^/10

  jupyterbackdoorstealertrojan

  • Jupyter Backdoor/Client payload

  • Jupyter, SolarMarker

    Jupyter is a backdoor and infostealer first seen in mid 2020.

    backdoortrojanstealerjupyter

  • Drops startup file

  • Blocklisted process makes network request

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory

  behavioral1behavioral2