General

  • Target

    Debug.zip

  • Size

    25.6MB

  • MD5

    1d4149e2ff526fd7059dc43db2ce8912

  • SHA1

    6194fc54aa48b961aea89f25c13eb277e9ebd645

  • SHA256

    8fb72514cc0728479614c357fe43f6b61a1aedacfb30d48d6a13b9037086723d

  • SHA512

    6071696c9b1f623850f2f37440670e425fdb2e089c3221ad12985ab8819a445c869b2507495a8cb46be6b43119ad97659bfbca2faaad8c4b91f3cec54290c3d2

  • SSDEEP

    786432:rxLROZXdpch44EfYbQkbC1V+iU9nO8gQzuT:JRoXdGyfY5NRdgQzg

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Debug.zip
    .zip
  • Debug/CeleryAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/WeAreDevs_API.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/Z3US Executor.exe.config
  • Debug/Z3US Executor.pdb
  • Debug/Z3USExecutor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Debug/bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/CeleryInjector.exe
    .exe windows:6 windows x64 arch:x64

    32a832ab43a8e8ab30ef0bf83732a6d0


    Headers

    Imports

    Sections

  • Debug/bin/ico.png
    .png
  • Debug/bin/ver.txt
  • Debug/main.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Z3US-Executor.pyc
  • Debug/runme.bat