Overview
overview
3Static
static
3CeleryIn.dll
windows7-x64
1CeleryIn.dll
windows10-2004-x64
1CeleryInject.exe
windows7-x64
1CeleryInject.exe
windows10-2004-x64
1NiggaSploit.dll
windows7-x64
1NiggaSploit.dll
windows10-2004-x64
1RoSploit.exe
windows7-x64
1RoSploit.exe
windows10-2004-x64
1RoSploit.exe
windows7-x64
1RoSploit.exe
windows10-2004-x64
1General
- Target shit exec.rar
- Size 691KB
- Sample240704-2arccavdkf
- SHA256 282cd620e1f29caf572622043e5eaf96d9e025e0e442d2a44ebb0413e651d6ce
- MD5 efc52323db08ce117ff6959cefee0052
- SHA1 0201f4513252765ce8859a15fb5bff312dfae7ef
- SHA512 2272d66706b5b6d13c4ea9a3e0df8742777faf2f780664f8a6c6429508f2d6d327aa86b405edfeba509d71a274795ce149560828a3b12a6fcccd8c71fe9a3679
- SSDEEP 12288:E8p0woTkZBAE4jsaILsHMFMwiQFs3/ggNEkjrYzaGrnDWdkGm09N5JQTQ/LAcTS:E86wQkZBj4jR+sHMF73FG/ggNEK3G2qV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
CeleryIn.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
CeleryIn.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
CeleryInject.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
CeleryInject.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
NiggaSploit.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
NiggaSploit.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
RoSploit.exe
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
RoSploit.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
RoSploit.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
RoSploit.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
- Target CeleryIn.bin
- Size 44KB
- SHA256 84b82453bbda410b7f53521eb995dbf486b1cce4706ab8504bc5ca35e93eb426
- MD5 1345cbc437e118c1d7dfa6cb77c35e1e
- SHA1 03ec05eb1622cb15a2a2c3335241ab26925afc11
- SHA512 2b1bad24f3f6bae30017a4edfad8c86701e8d9c2091ed866a54faf59da2a83dc0163ffed8aebe7eb8dd0ee3d1d5484c520218af28b62a379c6fba9c04b5a2a0b
- SSDEEP 384:DpCav8/g6q0MEe7T88ckOUm9FqlHGoMFRGjGO0t8HBIovSsgoDl2B6wQa8Ko4:DYXSXlcklIaG3R/OdIovN2w
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target CeleryInject.exe
- Size 3.2MB
- SHA256 873312f41195180840e7e1711e1bfde66d5fc805169454ce3a755d0a28cc7314
- MD5 b377734e92c27995715957f8d4c83189
- SHA1 1647d894ddf9c0e579eb459f09987bdef84576ce
- SHA512 f0ab58a404603e55a8e0a4d2bc0fd6370423ccb071de459b88a7d664f296feaf5fca8eeee362f7eda2e0913f429e95a25e2d7d6dcaa6babdad0bdabb1dc81c5d
- SSDEEP 24576:m3J15YpXSZeqjdyEpvDK8PSyFaSBSFjiSQOazFcDGjaNYcpEGp3f8+pET3lTCxy2:m3hWSQqj8LSwfQuDGjaNlpxp3fUlTC
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target NiggaSploit.dll
- Size 143KB
- SHA256 5e9b24dcb22928806fc1eb59a51e4e7c20c694c8a1eec88b2592e2b5303c594b
- MD5 9cf1b8c685352d0c941dda696e5ae021
- SHA1 0344d3c5f14546b68bcc53bbf790730cfd02e663
- SHA512 017dcdf92fd1e82e27e0a9c884a80bf7983ed1a81a3957d2cebcdb242ecd60dba35e61f58e4ec62f65de05c79300d5b7401279e4fb0bce95698e16d0c59b9208
- SSDEEP 1536:EPfPxthoKI2FIivn+MR4mq2Yr4/CDFAhmBfH2mtZWnTF51JZKgVH85CzNpnqA+gz:yfPRI2muVGmW4/4f2meJIkkI/H
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target RoSploit.dll
- Size 8KB
- SHA256 20a1d8455121ea50ab105ce0b39017d59aa2380419669a770408016cee482a96
- MD5 8539b5dac4160679fcc746420d1e71d9
- SHA1 be68d5a07f917cb9f80b1d63b6d818c4335ff11b
- SHA512 6091e6f5ade4d5e47089550b86d28fbf297657cfcbbabe0f460b46234eb31c03ed64caa6ab7bd5615bf05cfce917047e70f8e8c66c45b1ccc52a39244dcd1021
- SSDEEP 96:yugnlTDWgTCSShPvZuIaiS00HqwNUM9zSmZyDtkrwD9/LRSDQAFcPIwUzNt:ypnl/WgjSinJFK+5SmmtkkDdLmBFTwe
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target RoSploit.exe
- Size 139KB
- SHA256 9bf1776613038ee9d8b61920a397a1a17d80efdc110c66c3444a057c04fbceb1
- MD5 1409a2a49a1c2c9c9c08774f5aa3eff6
- SHA1 c48b95decffc7418c2080ccd3684b71bcd613f25
- SHA512 c283aa6683bb42e22ba162b61998774bfa87ca5f0ece6245a292c99c662a482bbda8593bb49aab9a1266b70d2d3720d04c463cdcf9c401c8ad84e86d08812b44
- SSDEEP 3072:niS4omp03WQthI/9S3BZi08iRQ1G78IVn2sbS7cJw8lti:niS4ompB9S3BZi0a1G78IVAcyct
- MD5 SHA1 SHA512 SSDEEP
Score1/10