Overview

overview

10

Static

static

1

extracted-1.ps1

windows10-1703-x64

10

extracted-1.ps1

windows10-2004-x64

10

extracted-1.ps1

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    extracted-1.ps1

  • Size

    2.6MB

  • Sample

    240419-bx2tgsch27

  • MD5

    87e85fd8fc5a47816e9ade4b96ef1f4c

  • SHA1

    07620efc8556da9bd8aa280448b8fa85d2caea9c

  • SHA256

    3c69cdd87cd7f8f49e37847c55352d450a066c76ea35a6b5391b4c990d9aadb2

  • SHA512

    29559fb0f4e908f28b3a932469551aca27e6070b717587ff1547aded3cc3173feae8e9d5265b679f25994c7ca8b5162fd3991c7a15fb7a667ce1207bad90746f

  • SSDEEP

    49152:aYCAeB2lr71SuRLZlhfyqeuvUm/q1pstArpE12kqRgTHj+lVK9:X

Score
10/10
jupyterbackdoorstealertrojan

Malware Config

Extracted

Family

jupyter

C2

146.70.40.235

Targets

    • Target

      extracted-1.ps1

    • Size

      2.6MB

    • MD5

      87e85fd8fc5a47816e9ade4b96ef1f4c

    • SHA1

      07620efc8556da9bd8aa280448b8fa85d2caea9c

    • SHA256

      3c69cdd87cd7f8f49e37847c55352d450a066c76ea35a6b5391b4c990d9aadb2

    • SHA512

      29559fb0f4e908f28b3a932469551aca27e6070b717587ff1547aded3cc3173feae8e9d5265b679f25994c7ca8b5162fd3991c7a15fb7a667ce1207bad90746f

    • SSDEEP

      49152:aYCAeB2lr71SuRLZlhfyqeuvUm/q1pstArpE12kqRgTHj+lVK9:X

    Score
    10/10
    jupyterbackdoorstealertrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks