General

  • Target

    CeleryX.rar

  • Size

    9.5MB

  • MD5

    652860b616e21216b019cdadb75cf688

  • SHA1

    2f02442f9cc40789f158db8fed82a8bdd2588a07

  • SHA256

    30093963c9e956172a662a4b1662e0be661eac987822346b89b64636a3b89fe9

  • SHA512

    61b5850b7c078bd71e263e15177f34490b0f2534af2899dced65e6dfede012aef791c0aea48627f8eaa421922ee7005e34880026ab1b497ee333938495be7b94

  • SSDEEP

    196608:/Deym40phVJuIwtUc5wM+qAilPh5flNiAMXSMRYGxtzdzd6gTGYBAt:HR8J8f5wdYp5f3iA4RYCRdzMWG

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • CeleryX.rar
    .rar

    Password: ruCwIeDX9cFugUPx

  • CeleryX/Cel3ry.exe
    .exe windows:4 windows x86 arch:x86

    Password: ruCwIeDX9cFugUPx

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $INTERNET_CACHE/Ballot
  • $INTERNET_CACHE/De
  • $INTERNET_CACHE/Jersey
  • $INTERNET_CACHE/Ln
  • $INTERNET_CACHE/Nhl
  • $INTERNET_CACHE/Nominations
  • $INTERNET_CACHE/Phantom
  • $INTERNET_CACHE/Plaza
  • $INTERNET_CACHE/Precise
  • $INTERNET_CACHE/Railway
  • $INTERNET_CACHE/Spirits
  • $INTERNET_CACHE/Survivors
  • $INTERNET_CACHE/Tall
  • CeleryX/dll/VMProtectSDK32.dll
    .dll windows:5 windows x86 arch:x86

    Password: ruCwIeDX9cFugUPx

    b9f19b4d3ce951c4ff6196681bbb3439


    Headers

    Imports

    Exports

    Sections

  • CeleryX/dll/VMProtectSDK32.lib
  • CeleryX/dll/autoexec/HOW_TO_USE.txt
  • CeleryX/dll/celeryuwp.bin
    .dll windows:6 windows x86 arch:x86

    Password: ruCwIeDX9cFugUPx

    1c23c1ea89b7252f3716da06ebe3581f


    Headers

    Imports

    Exports

    Sections

  • CeleryX/dll/celeryuwpver
  • CeleryX/dll/uwpoff.bin
  • CeleryX/dll/uwpoffver
  • CeleryX/dll/uwpversion.txt
  • CeleryX/scripts/scripts.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    Password: ruCwIeDX9cFugUPx

    a9fd3e7f71a802c8eee0a502f46de991


    Code Sign

    Headers

    Imports

    Exports

    Sections