Overview
overview
10Static
static
10Pollos/CeleryIn.dll
windows7-x64
1Pollos/CeleryIn.dll
windows10-2004-x64
1Pollos/Guna.UI2.dll
windows7-x64
1Pollos/Guna.UI2.dll
windows10-2004-x64
1Pollos/Inject.exe
windows7-x64
1Pollos/Inject.exe
windows10-2004-x64
1Pollos/Mon...o.html
windows7-x64
3Pollos/Mon...o.html
windows10-2004-x64
3Pollos/Mon...ain.js
windows7-x64
3Pollos/Mon...ain.js
windows10-2004-x64
3Pollos/Mon...bat.js
windows7-x64
3Pollos/Mon...bat.js
windows10-2004-x64
3Pollos/Mon...fee.js
windows7-x64
3Pollos/Mon...fee.js
windows10-2004-x64
3Pollos/Mon...cpp.js
windows7-x64
3Pollos/Mon...cpp.js
windows10-2004-x64
3Pollos/Mon...arp.js
windows7-x64
3Pollos/Mon...arp.js
windows10-2004-x64
3Pollos/Mon...csp.js
windows7-x64
3Pollos/Mon...csp.js
windows10-2004-x64
3Pollos/Mon...css.js
windows7-x64
3Pollos/Mon...css.js
windows10-2004-x64
3Pollos/Mon...ile.js
windows7-x64
3Pollos/Mon...ile.js
windows10-2004-x64
3Pollos/Mon...arp.js
windows7-x64
3Pollos/Mon...arp.js
windows10-2004-x64
3Pollos/Mon.../go.js
windows7-x64
3Pollos/Mon.../go.js
windows10-2004-x64
3Pollos/Mon...ars.js
windows7-x64
3Pollos/Mon...ars.js
windows10-2004-x64
3Pollos/Mon...tml.js
windows7-x64
3Pollos/Mon...tml.js
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
01-08-2024 21:14
Behavioral task
behavioral1
Sample
Pollos/CeleryIn.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Pollos/CeleryIn.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
Pollos/Guna.UI2.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Pollos/Guna.UI2.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
Pollos/Inject.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Pollos/Inject.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
Pollos/Monaco/Monaco.html
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Pollos/Monaco/Monaco.html
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
Pollos/Monaco/vs/base/worker/workerMain.js
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Pollos/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
Pollos/Monaco/vs/basic-languages/bat/bat.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Pollos/Monaco/vs/basic-languages/bat/bat.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
Pollos/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Pollos/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
Pollos/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Pollos/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral17
Sample
Pollos/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Pollos/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral19
Sample
Pollos/Monaco/vs/basic-languages/csp/csp.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Pollos/Monaco/vs/basic-languages/csp/csp.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral21
Sample
Pollos/Monaco/vs/basic-languages/css/css.js
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Pollos/Monaco/vs/basic-languages/css/css.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral23
Sample
Pollos/Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
Pollos/Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral25
Sample
Pollos/Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Pollos/Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral27
Sample
Pollos/Monaco/vs/basic-languages/go/go.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Pollos/Monaco/vs/basic-languages/go/go.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral29
Sample
Pollos/Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Pollos/Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral31
Sample
Pollos/Monaco/vs/basic-languages/html/html.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Pollos/Monaco/vs/basic-languages/html/html.js
Resource
win10v2004-20240730-en
General
-
Target
Pollos/Inject.exe
-
Size
4.8MB
-
MD5
d0d3ee3e3310852064d0417f461a854c
-
SHA1
d1df210e830ba630d87dc00e8c16ceb16f7ce950
-
SHA256
e13d707559463de6dfda00dfbae4eec1c42441f8f63a0dabb134dfc7ce8da85c
-
SHA512
06a8db83892c1c2bf7b2575e5a6849b8a912a5a5cabd9baee8fa6073d699e7550a2fcf7284e6ca172f0ac10f4cfd512dfb98e6d1f9079e20569b78fd04c8d166
-
SSDEEP
49152:3SqNT7OeXgwZJLuHz1XmNnDDGjyAlqp53PeksTdnHdnndn+dntttk:nFPuT2K
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe 3708 Inject.exe