jupyter | fgr[.]dll | Triage

Sharing

General

Target

fgr.dll
Size

171KB
MD5

f7144fc51abcd6a37d15abfbcdb1d319
SHA1

fc7d4c54e08123acf79505f9f7c07c8518f243c8
SHA256

e91e49fa225b2a9d7b6d5b33a64d4ebe96bbbcea3705438910a5196e0b9d030f
SHA512

7e6eca6d9a37da1f17359681599c4acddf92e80f7041e095480a74c0a95478ad8dcf58fda1959e1ddfc5e346ae22863ffde1ad2f8de53cb7fa4adf1b353f3fb2

Score

10^/10

jupyter

Malware Config

Extracted

Family

jupyter

C2

http://146.70.101.97

Signatures

Jupyter 1 IoCs

Processes:

resource yara_rule

sample Jupyter
Jupyter family
jupyter

Files

fgr.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ