Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14-05-2024 19:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CeleryApp.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
CeleryApp.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
CeleryApp.exe
Resource
win11-20240508-en
windows11-21h2-x64
0 signatures
150 seconds
General
-
Target
CeleryApp.exe
-
Size
8.7MB
-
MD5
6228e8d07dc983c0afb22323bf704fd9
-
SHA1
1903fb4bbfd545db6a67263ebcbbca47e6d35251
-
SHA256
ee662c7bc46baa480b0fa76be9b4bf1db70977b570e41405a26bfe430cdc7e8d
-
SHA512
3564cf8f5503e55d587cc21dc25d80b71eef1b1baaf187af4a8f8b4da89d8ddcb37cd4063aa4ffdd824f9c48a1bc1bae7259b7a02033a5c4423680172c0b0fee
-
SSDEEP
98304:qKWgLIRfyC7egWJ3PJzdjf4fwraOWcD9XdMPABIw/t6KHDicVwzUsba:qKWguhega4fJOWs9XNBZ16M2cuU
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2312 wrote to memory of 2464 2312 CeleryApp.exe 28 PID 2312 wrote to memory of 2464 2312 CeleryApp.exe 28 PID 2312 wrote to memory of 2464 2312 CeleryApp.exe 28