Overview
overview
4Static
static
3RC7/AlphaB...ox.dll
windows10-1703-x64
1RC7/Bunifu....3.dll
windows10-1703-x64
1RC7/CeleryIn.dll
windows10-1703-x64
1RC7/CeleryInject.exe
windows10-1703-x64
1RC7/RC7_UI.exe
windows10-1703-x64
3RC7/RC7_UI...re.dll
windows10-1703-x64
1RC7/RC7_UI...pet.js
windows10-1703-x64
3RC7/autoex...pts.js
windows10-1703-x64
3RC7/bin/Monaco.html
windows10-1703-x64
4RC7/bin/Mo...r.html
windows10-1703-x64
4RC7/bin/vs...ain.js
windows10-1703-x64
3RC7/bin/vs...bat.js
windows10-1703-x64
3RC7/bin/vs...fee.js
windows10-1703-x64
3RC7/bin/vs...cpp.js
windows10-1703-x64
3RC7/bin/vs...arp.js
windows10-1703-x64
3RC7/bin/vs...csp.js
windows10-1703-x64
3RC7/bin/vs...css.js
windows10-1703-x64
3RC7/bin/vs...ile.js
windows10-1703-x64
3RC7/bin/vs...arp.js
windows10-1703-x64
3RC7/bin/vs.../go.js
windows10-1703-x64
3RC7/bin/vs...ars.js
windows10-1703-x64
3RC7/bin/vs...tml.js
windows10-1703-x64
3RC7/bin/vs...ini.js
windows10-1703-x64
3RC7/bin/vs...ava.js
windows10-1703-x64
3RC7/bin/vs...ess.js
windows10-1703-x64
3RC7/bin/vs...lua.js
windows10-1703-x64
3RC7/bin/vs...own.js
windows10-1703-x64
3RC7/bin/vs...dax.js
windows10-1703-x64
3RC7/bin/vs...sql.js
windows10-1703-x64
3RC7/bin/vs...e-c.js
windows10-1703-x64
3RC7/bin/vs...sql.js
windows10-1703-x64
3RC7/bin/vs...php.js
windows10-1703-x64
3Analysis
-
max time kernel
150s -
max time network
85s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
31-07-2024 16:03
Static task
static1
Behavioral task
behavioral1
Sample
RC7/AlphaBlendTextBox.dll
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
RC7/Bunifu_UI_v1.5.3.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
RC7/CeleryIn.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
RC7/CeleryInject.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
RC7/RC7_UI.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
RC7/RC7_UI.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
RC7/RC7_UI.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.54/adblock_snippet.js
Resource
win10-20240611-en
Behavioral task
behavioral8
Sample
RC7/autoexec/_G Scripts.js
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
RC7/bin/Monaco.html
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
RC7/bin/MonacoEditor.html
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
RC7/bin/vs/base/worker/workerMain.js
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
RC7/bin/vs/basic-languages/bat/bat.js
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
RC7/bin/vs/basic-languages/coffee/coffee.js
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
RC7/bin/vs/basic-languages/cpp/cpp.js
Resource
win10-20240611-en
Behavioral task
behavioral15
Sample
RC7/bin/vs/basic-languages/csharp/csharp.js
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
RC7/bin/vs/basic-languages/csp/csp.js
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
RC7/bin/vs/basic-languages/css/css.js
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
RC7/bin/vs/basic-languages/dockerfile/dockerfile.js
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
RC7/bin/vs/basic-languages/fsharp/fsharp.js
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
RC7/bin/vs/basic-languages/go/go.js
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
RC7/bin/vs/basic-languages/handlebars/handlebars.js
Resource
win10-20240611-en
Behavioral task
behavioral22
Sample
RC7/bin/vs/basic-languages/html/html.js
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
RC7/bin/vs/basic-languages/ini/ini.js
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
RC7/bin/vs/basic-languages/java/java.js
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
RC7/bin/vs/basic-languages/less/less.js
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
RC7/bin/vs/basic-languages/lua/lua.js
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
RC7/bin/vs/basic-languages/markdown/markdown.js
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
RC7/bin/vs/basic-languages/msdax/msdax.js
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
RC7/bin/vs/basic-languages/mysql/mysql.js
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
RC7/bin/vs/basic-languages/objective-c/objective-c.js
Resource
win10-20240611-en
Behavioral task
behavioral31
Sample
RC7/bin/vs/basic-languages/pgsql/pgsql.js
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
RC7/bin/vs/basic-languages/php/php.js
Resource
win10-20240404-en
General
-
Target
RC7/CeleryInject.exe
-
Size
4.8MB
-
MD5
ed10dc5297ce06b1f2ac9be338813439
-
SHA1
e6423d50a5dab548b2d77799abfca9d6db0f83bd
-
SHA256
e97562123b7c059aec0e31a3bdc402f13e41e9f0ab38857b1adf948b350a8a94
-
SHA512
bc061587e29eca586c1f4a70cd4d7ee73b83b13642f763609af36cea6297917ac86bfca861fdc08113fd3107793ed9f93e7b9bdc8408b34cb1a0751482809a84
-
SSDEEP
49152:nJm4iNvgKzFKHLT48y3vPqAmDGjyAlqP53Ps9Ssudn1dnndn+dnMHJtk:JGI5HWeK
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe 2516 CeleryInject.exe