General

  • Target

    Celestial_Rat.rar

  • Size

    13.1MB

  • Sample

    240523-hbqyesgd73

  • MD5

    30496f3a3ebd66dd1e1a9c98f0c2972c

  • SHA1

    40571b3491c032ab1c28ebc24859a0d01300fafe

  • SHA256

    1001fdf77dfa3f34ae1a7e6d32776dcdd94365dc4785a8b82e96834c9d0f60bd

  • SHA512

    ba6fb9e5b555b20c5d0c14ab209890948982849d3da4bc0f336db1b3baf7d212e50b8ca6a1db89fc2679eb008021e9651b4795ea6990fc2b9915c8156695ec5f

  • SSDEEP

    393216:uoUU21bSb/2r7fIKXX/XapCaNtmWGTpVlPchk5k:uoUnFDfXitmWVv

Score
7/10

Malware Config

Targets

    • Target

      Celestial_Rat.rar

    • Size

      13.1MB

    • MD5

      30496f3a3ebd66dd1e1a9c98f0c2972c

    • SHA1

      40571b3491c032ab1c28ebc24859a0d01300fafe

    • SHA256

      1001fdf77dfa3f34ae1a7e6d32776dcdd94365dc4785a8b82e96834c9d0f60bd

    • SHA512

      ba6fb9e5b555b20c5d0c14ab209890948982849d3da4bc0f336db1b3baf7d212e50b8ca6a1db89fc2679eb008021e9651b4795ea6990fc2b9915c8156695ec5f

    • SSDEEP

      393216:uoUU21bSb/2r7fIKXX/XapCaNtmWGTpVlPchk5k:uoUnFDfXitmWVv

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks