41554 blogs · 4,450,554 posts Claim your blog

Record · corpus.blog/posts/01a0d209-20da-73d8-9a47-baadf22f0d84

Solarmarker: by any other name

squiblydoo.blog · published 17 October 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at squiblydoo.blog Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 18
Words captured: 1,498

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.virustotal.com/gui/file/c61348ab7e5ffeb9ba5d1077b13c49bde4d841c5ada9a119f8234af89421f783/details

virustotal.com

https://www.virustotal.com/gui/file/0e673eb418c87268aa3bcb262e8e03a3f719a95a8e118ba99515c57c9aa02d38/details

virustotal.com

https://expel.io/blog/top-attack-vectors-september-2021/

expel.io

Mars-Deimos: SolarMarker/Jupyter Infostealer (Part 1) Read at the source ↗

squiblydoo.blog

Mars-Deimos: From Jupiter to Mars and Back again (Part Two) Read at the source ↗

squiblydoo.blog

Solarmarker: Registry Key Persistence Walkthrough Read at the source ↗

squiblydoo.blog

https://www.scootersoftware.com/download.php

scootersoftware.com

https://www.elastic.co/blog/going-coast-to-coast-climbing-the-pyramid-with-the-deimos-implant

elastic.co

https://bazaar.abuse.ch/browse.php?search=tag%3AJupyter

bazaar.abuse.ch

https://github.com/Squiblydoo/bazaarShopper

github.com

https://github.com/securitymagic/yara/blob/main/Jupyter%20Malware/JupyterDll.yar

github.com

https://github.com/BinaryDefense/YaraMemoryScanner

github.com

https://www.esentire.com/security-advisories/hackers-flood-the-web-with-100-000-malicious-pages-promising-professionals-free-business-forms-but-are-delivering-malware-reports-esentire

esentire.com

https://www.esentire.com/blog/solarmarker-shifts-infrastructure-in-recent-drive-by-attacks

esentire.com

https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries/blob/master/Campaigns/Jupyter-Solarmaker/successive-tk-domain-calls.md

github.com

https://www.youtube.com/watch?v=Y_DrANTPyD0

youtube.com

https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries/tree/master/Campaigns/Jupyter-Solarmaker

github.com

https://blog.talosintelligence.com/2021/07/threat-spotlight-solarmarker.html

blog.talosintelligence.com