495a09911a64f12aeef451a71b27d14daec9d6c5ea308825f5026327f05a466c | Triage

Analysis

max time kernel
59s
max time network
20s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
25/08/2024, 12:06

Sharing

Report Analysis Logs

General

Target

CeleryInject.exe
Size

5.7MB
MD5

90d0a596ae30160e8fe03a808a4c3cbf
SHA1

d0816ead5479c407f689f4b37215a08edd3336d2
SHA256

9623fa4cd74e4cd3c9a43c70375353f4e153e63f9171a47142e6ca5aad276f48
SHA512

454bddb349e68e23d3164ca0c014e260b9d129cd015b2c7330a7474b89ac0c6df6a73e2555789dbde9bd853ad50051575f5967caef3cdc8be0434c96b3d80203
SSDEEP

49152:444uke5EB61w1q9KEz6XK9X0/Cr73HSVDGjVNyJo+nPp09BT7FsgsEcs474wssuH:4zrXWNKxO5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe
3376	CeleryInject.exe

C:\Users\Admin\AppData\Local\Temp\CeleryInject.exe
"C:\Users\Admin\AppData\Local\Temp\CeleryInject.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads