General

  • Target

    cele.rar

  • Size

    13.1MB

  • MD5

    888ca47b9518484867d852dc002a0ef7

  • SHA1

    d6fa40bc348f90eda07431455f64de00f1e2ed1e

  • SHA256

    9cf61faaa304e8178b145bab4f77ee3b97b1feb44ce894172feb1eb63d434bd3

  • SHA512

    35ff950983ba449088b91af0ac8b768e83dd08ba0a0e3cabd4b51c88c3c43be8ea60735d49d932878623a7a0b3712c59aaea493fbc5a45e897a1c0b34aaa7af4

  • SSDEEP

    393216:WoUU21bSb/2r7fIKXX/XapCaN0qvWnVAWGQhZ4Y:WoUnFDfXi0qvWL4Y

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • cele.rar
    .rar
  • cele/Celestial.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • cele/CelestialPatcher.exe
    .exe windows:6 windows x64 arch:x64

    d341ecf5263ee0002cca002652f0c62c


    Headers

    Imports

    Exports

    Sections

  • cele/IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/Notifications.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/WinMM.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/6c.dll
  • cele/data/8c.dll
  • cele/data/RT.bin
  • cele/data/RTS.bin
  • cele/data/asm.exe
    .exe windows:4 windows x64 arch:x64

    245fd5847db29ac01003e87f2fc0fe30


    Headers

    Imports

    Sections

  • cele/data/d.exe
  • cele/data/injector.bin
  • cele/data/libs/AForge.Video.DirectShow.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/libs/AForge.Video.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/libs/DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/libs/SharpDX.DXGI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/libs/SharpDX.Direct3D11.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/libs/SharpDX.Direct3D9.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/libs/SharpDX.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/data/payload/m.exe
    .exe windows:4 windows x86 arch:x86

    51e7ef6b1d43d0d05d7109dee9789560


    Headers

    Imports

    Sections

  • cele/data/payload/sig.py
  • cele/data/stub.bin
  • cele/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/log.txt
  • cele/scripts/ClipperLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • cele/server/Server.deps.json
  • cele/server/Server.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • cele/server/Server.runtimeconfig.json
  • cele/server/net8 linux install.txt
  • cele/server/start.bat
  • cele/server/start.sh
  • cele/sound.wav
  • cele/Загрузки - Ярлык.lnk
    .lnk