General

  • Target

    shit exec.zip

  • Size

    968KB

  • MD5

    30df4176e4c3fe707e86e2a4dc45429f

  • SHA1

    fcabe860091d4393061104e7babd16bb720e7b57

  • SHA256

    2fac0a328fb1e007c1947218de9d828aba20c8cd44fd1fd6e0674c2a182cf733

  • SHA512

    84f7541fdccc5721e4b73d952d4ead4b4865bf5bc86a9bbbc528e598fd4e4715ea1b4aaabf14bcf475becf97ae97cc5306ee9a808abba3dd4944ea0a59453fbc

  • SSDEEP

    24576:c4+zxNFmIgaQOKYZqRdUdvLX+wBgJ9GtOT7Vx9459df:c4+zs78ZqROqwBgvOOTZcDdf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • shit exec.zip
    .zip
  • shit exec/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • shit exec/CeleryInject.exe
    .exe windows:6 windows x64 arch:x64

    46310f9cc3d737e79880b9e8a77b58ec


    Headers

    Imports

    Sections

  • shit exec/NiggaSploit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • shit exec/RoSploit.deps.json
  • shit exec/RoSploit.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • shit exec/RoSploit.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • shit exec/RoSploit.pdb
  • shit exec/RoSploit.runtimeconfig.json