Resubmissions

04-07-2024 22:32

240704-2ge8navfrb 3

04-07-2024 22:23

240704-2arccavdkf 3

General

  • Target

    shit exec.rar

  • Size

    691KB

  • MD5

    efc52323db08ce117ff6959cefee0052

  • SHA1

    0201f4513252765ce8859a15fb5bff312dfae7ef

  • SHA256

    282cd620e1f29caf572622043e5eaf96d9e025e0e442d2a44ebb0413e651d6ce

  • SHA512

    2272d66706b5b6d13c4ea9a3e0df8742777faf2f780664f8a6c6429508f2d6d327aa86b405edfeba509d71a274795ce149560828a3b12a6fcccd8c71fe9a3679

  • SSDEEP

    12288:E8p0woTkZBAE4jsaILsHMFMwiQFs3/ggNEkjrYzaGrnDWdkGm09N5JQTQ/LAcTS:E86wQkZBj4jR+sHMF73FG/ggNEK3G2qV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • shit exec.rar
    .rar

    Password: infected

  • CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    Password: infected

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • CeleryInject.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    46310f9cc3d737e79880b9e8a77b58ec


    Headers

    Imports

    Sections

  • NiggaSploit.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RoSploit.deps.json
  • RoSploit.dll
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RoSploit.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • RoSploit.pdb
  • RoSploit.runtimeconfig.json