Overview
overview
3Static
static
3VULNERA V3.zip
windows7-x64
1VULNERA V3.zip
windows10-2004-x64
1CeleryIn.dll
windows7-x64
1CeleryIn.dll
windows10-2004-x64
1CeleryInject.exe
windows7-x64
1CeleryInject.exe
windows10-2004-x64
1EVERYTHING.exe
windows7-x64
1EVERYTHING.exe
windows10-2004-x64
1EVERYTHING.exe.config
windows7-x64
3EVERYTHING.exe.config
windows10-2004-x64
3EVERYTHING.pdb
windows7-x64
3EVERYTHING.pdb
windows10-2004-x64
3STAPI.dll
windows7-x64
1STAPI.dll
windows10-2004-x64
1Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13-07-2024 17:22
Static task
static1
Behavioral task
behavioral1
Sample
VULNERA V3.zip
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
VULNERA V3.zip
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
CeleryIn.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
CeleryIn.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
CeleryInject.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
CeleryInject.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
EVERYTHING.exe
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
EVERYTHING.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
EVERYTHING.exe.config
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
EVERYTHING.exe.config
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
EVERYTHING.pdb
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
EVERYTHING.pdb
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
STAPI.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
STAPI.dll
Resource
win10v2004-20240709-en
General
-
Target
CeleryInject.exe
-
Size
3.4MB
-
MD5
ff3728a63db84bd000176d56e5672d0f
-
SHA1
ddac6646d16d6efe73d9cf8b8c7a8cb3d8ab55ae
-
SHA256
375f3b4bdff6a9d9ac581456d0ed49b56e72443cc09bac1010596b74b8945d02
-
SHA512
8824507a41a59ec649d51f012c6ec777237edc42b764c47c9fdff6e7e3722adf0283ff118ad69018cd27911572feb1db280a5feecea2936780e6dddfa5df3eb3
-
SSDEEP
49152:B5EU2GVV1EcBHbhI9ZFlDGjiolwOp3fvGA:UsX1JUu
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe 1700 CeleryInject.exe