334839a878f41c61aaaf84865762e4afa7135a9576af0bace4ce3383d2d83ee4 | Triage

Analysis

max time kernel
150s
max time network
141s
platform
windows10-1703_x64
resource
win10-20240404-fr
resource tags

arch:x64arch:x86image:win10-20240404-frlocale:fr-fros:windows10-1703-x64systemwindows
submitted
24/08/2024, 17:22

Sharing

Report Analysis Logs

General

Target

CeleryInject.exe
Size

5.5MB
MD5

072bd8b0166f4e8c134fddd1a91b16c6
SHA1

da0e078b22b6739eb2ae67ef3dd7ac7ee841f96c
SHA256

f84e39b3be2ba74691b82dab25a4d42d13535f138d9c69ffe37d45d90612a34f
SHA512

5ff3173c47a7718c41076507a5c3d8e83021928dead3c82ce6e46b4609afa6ffa4af7cd4af1b779805c00ccd5b9ee5a59144c0507bb17db8fad77b0e144ee828
SSDEEP

49152:uACTPFe76hHoYwVbV+huHplzrvTAm+DGjV1ykc+nPsbn3+nM6Pzs0dn3dnndn+dF:WwHpoe6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe
1688	CeleryInject.exe

C:\Users\Admin\AppData\Local\Temp\CeleryInject.exe
"C:\Users\Admin\AppData\Local\Temp\CeleryInject.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads