Resubmissions

04/07/2024, 22:08

240704-12pr6atgrg 3

04/07/2024, 22:07

240704-114jxs1hrj 3

04/07/2024, 22:05

240704-1zzjks1hkp 6

General

  • Target

    shit exec.zip

  • Size

    968KB

  • MD5

    e724ca861da872339e2970ef9430e0a0

  • SHA1

    3cb1347adb798f05612ae0d286a07131c56ae006

  • SHA256

    f2847a9e08efe350ebf97ae64b7f1f324b634181e0300f2ef40c8368a5f59f31

  • SHA512

    6a86c383ff22d6ad08f7ead257cd253cda9ae34970f4e4b2b7e60ac7c58e89a86a3a8ca368c0329717e043121fa3b457e2c9cf081cb6913d6a740bfbc01b05de

  • SSDEEP

    24576:04+zxNFmIgaQOKYZqRdUdvLX+wBgJ9GtOT7Vx9459d1:04+zs78ZqROqwBgvOOTZcDd1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • shit exec.zip
    .zip
  • shit exec/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • shit exec/CeleryInject.exe
    .exe windows:6 windows x64 arch:x64

    46310f9cc3d737e79880b9e8a77b58ec


    Headers

    Imports

    Sections

  • shit exec/NiggaSploit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • shit exec/RoSploit.deps.json
  • shit exec/RoSploit.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • shit exec/RoSploit.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • shit exec/RoSploit.pdb
  • shit exec/RoSploit.runtimeconfig.json