Described by Elastic as being associated with win.jupyter, and being used in the context of initial access, persistence, and C&C capabilities.
Hunting C2/Adversaries Infrastructure with Shodan and Censys
Brute Ratel C4 Cobalt Strike Deimos GRUNT IcedID Merlin Meterpreter Nighthawk PoshC2 Sliver
Going Coast to Coast - Climbing the Pyramid with the Deimos Implant
There is no Yara-Signature yet.