General

  • Target

    so.zip

  • Size

    1.5MB

  • MD5

    2f870520a0bff9012835b7e3ba96a5f3

  • SHA1

    5e264d96684d2c00fbcedbda811d9c3b1058c6a0

  • SHA256

    6632f6314e00fc19edf04aae0f9a85fdbbdaf9c4780b4428638c425e8cd2bf33

  • SHA512

    53f21f16d26d08020cfacd6317cc4afe7a16f89bb9a701dce56288284bd584b07d05b7caec6fa7fece46a2948407cb7f022739aa0699563755a22b3033969612

  • SSDEEP

    49152:FKCgyKbPv3w9aq9+xviWmNyMQ5c/5ywLMxJwdCD:FKCg7bX3w9FCvi3NyLqZdE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • so.zip
    .zip
  • idfjgjfkjh/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • idfjgjfkjh/CeleryInject.exe
    .exe windows:6 windows x64 arch:x64

    46310f9cc3d737e79880b9e8a77b58ec


    Headers

    Imports

    Sections

  • idfjgjfkjh/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • idfjgjfkjh/NiggaSploit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • idfjgjfkjh/SigmaSploit.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • idfjgjfkjh/Siticone.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • idfjgjfkjh/WindowsFormsApp4.exe.config
  • idfjgjfkjh/WindowsFormsApp4.pdb