Overview
overview
7Static
static
3Release.zip
windows11-21h2-x64
1bin/API.dll
windows11-21h2-x64
1celestial.cc.exe
windows11-21h2-x64
3main.exe
windows11-21h2-x64
7workspace/...le.txt
windows11-21h2-x64
3workspace/...et.txt
windows11-21h2-x64
3workspace/...le.txt
windows11-21h2-x64
3workspace/..._1.txt
windows11-21h2-x64
3workspace/..._2.txt
windows11-21h2-x64
3workspace/...le.txt
windows11-21h2-x64
3workspace/...tefile
windows11-21h2-x64
1workspace/...le.txt
windows11-21h2-x64
3Analysis
-
max time kernel
36s -
max time network
42s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
25-07-2024 10:53
Static task
static1
Behavioral task
behavioral1
Sample
Release.zip
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
bin/API.dll
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
celestial.cc.exe
Resource
win11-20240709-en
Behavioral task
behavioral4
Sample
main.exe
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
workspace/.tests/appendfile.txt
Resource
win11-20240709-en
Behavioral task
behavioral6
Sample
workspace/.tests/getcustomasset.txt
Resource
win11-20240709-en
Behavioral task
behavioral7
Sample
workspace/.tests/isfile.txt
Resource
win11-20240709-en
Behavioral task
behavioral8
Sample
workspace/.tests/listfiles/test_1.txt
Resource
win11-20240709-en
Behavioral task
behavioral9
Sample
workspace/.tests/listfiles/test_2.txt
Resource
win11-20240709-en
Behavioral task
behavioral10
Sample
workspace/.tests/readfile.txt
Resource
win11-20240709-en
Behavioral task
behavioral11
Sample
workspace/.tests/writefile
Resource
win11-20240709-en
Behavioral task
behavioral12
Sample
workspace/.tests/writefile.txt
Resource
win11-20240709-en
General
-
Target
celestial.cc.exe
-
Size
10KB
-
MD5
1dd512fe06ff6fc16f1523f3dbd5f662
-
SHA1
2408eaecba63f5a2beaaf914fd3f36152a5e65a4
-
SHA256
bfd0e8f20d2a1f458090e59796b2e3e582fa3db0fb6c653ead5c46329bd83ef9
-
SHA512
23114fc9fbfa40feaced27d77590075dba5dbd3daf0ede00ab8728e484484cabbd21a1008ff15c2f4fefa8f33ea7f74f43f048adcb3be14ffc61f61f0a7103ab
-
SSDEEP
192:KY3TNMCiKdLZGBvh2QSIEQExWSO5RtIyrQECEhw0uJVdgBfrH:KY3TNMCiK+BJ2qEQEjuRtI8QpEkJVGBj
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language celestial.cc.exe