97d7996c657dac39497001683776ea390ba3f3f70f31da017547bbd4590701d7 | Triage

Analysis

max time kernel
600s
max time network
427s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08-08-2024 09:43

Sharing

Report Analysis Logs

General

Target

Release/CeleryInject.exe
Size

5.0MB
MD5

a219324612da6da115423f2118ed7d60
SHA1

e25653239651637604e1b6e65fdd719aee2917ec
SHA256

b3f9cdae756e9cf1f5b8a823648395ed68d82c6a62d606fd0c6eb9a0be10d51f
SHA512

9958ca39f43c7754e6a5586e5cb1a40963a4ec9db898051c327198c31708beb067944d1581355f2bb04e69de62e69de8a6a708213d60d571f74c112b3d489187
SSDEEP

49152:HBAPhbBL8IjBDC0J0S27DGjyclWb53PppOPxjfsRdn6dnndn+dnT0Uf:HnIRZJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe
2416	CeleryInject.exe

C:\Users\Admin\AppData\Local\Temp\Release\CeleryInject.exe
"C:\Users\Admin\AppData\Local\Temp\Release\CeleryInject.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads