General

  • Target

    Release.zip

  • Size

    182.2MB

  • MD5

    908e66ce7af5a5ca0e71810e4f79fa3a

  • SHA1

    05f6fef08d6e1be71c9ac9934ee55b9dbeb5e0bc

  • SHA256

    2dd0eb2a8aee792d872773954f5a5225fb72b7301844a38f5197ebe94ddbcecc

  • SHA512

    f0422acaec23c16b2cf8f359e1fec344906f206eaa0dcc3f31a71aaad79e408d082f0a8d118089ac3d89327ec259cb5af9222ed161087997bbd7522c9fd81c8c

  • SSDEEP

    3145728:vd5/lrgzCk5qmWU8upPEPbuuHK4bhZeq5f377EfL8lhKkvSU5MfsvkVjw/H:l5/lrNFnP6wK4bhZeq5DkL2JvPafx9w/

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.zip
    .zip
  • Celery.deps.json
  • Celery.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Celery.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Celery.runtimeconfig.json
  • bin/Ace/ace.html
    .html
  • bin/Ace/js/ace/ace.js
    .js
  • bin/Ace/js/ace/ext-beautify.js
    .js
  • bin/Ace/js/ace/ext-code_lens.js
    .js
  • bin/Ace/js/ace/ext-command_bar.js
    .js
  • bin/Ace/js/ace/ext-elastic_tabstops_lite.js
    .js
  • bin/Ace/js/ace/ext-emmet.js
    .js
  • bin/Ace/js/ace/ext-error_marker.js
    .js
  • bin/Ace/js/ace/ext-hardwrap.js
    .js
  • bin/Ace/js/ace/ext-inline_autocomplete.js
    .js
  • bin/Ace/js/ace/ext-keybinding_menu.js
    .js
  • bin/Ace/js/ace/ext-language_tools.js
    .js
  • bin/Ace/js/ace/ext-linking.js
    .js
  • bin/Ace/js/ace/ext-modelist.js
    .js
  • bin/Ace/js/ace/ext-options.js
    .js
  • bin/Ace/js/ace/ext-prompt.js
    .js
  • bin/Ace/js/ace/ext-rtl.js
    .js
  • bin/Ace/js/ace/ext-searchbox.js
    .js
  • bin/Ace/js/ace/ext-settings_menu.js
    .js
  • bin/Ace/js/ace/ext-spellcheck.js
    .js
  • bin/Ace/js/ace/ext-split.js
    .js
  • bin/Ace/js/ace/ext-static_highlight.js
    .js
  • bin/Ace/js/ace/ext-statusbar.js
    .js
  • bin/Ace/js/ace/ext-textarea.js
    .js
  • bin/Ace/js/ace/ext-themelist.js
    .js
  • bin/Ace/js/ace/ext-whitespace.js
    .js
  • bin/Ace/js/ace/keybinding-emacs.js
    .js
  • bin/Ace/js/ace/keybinding-sublime.js
    .js
  • bin/Ace/js/ace/keybinding-vim.js
    .js
  • bin/Ace/js/ace/keybinding-vscode.js
    .js
  • bin/Ace/js/ace/mode-lua.js
    .js
  • bin/Ace/js/ace/snippets/lua.js
    .js
  • bin/Ace/js/ace/theme-celery.js
    .js
  • bin/Ace/js/ace/theme-template.js
    .js
  • bin/Ace/js/ace/worker-base.js
    .js
  • bin/Ace/js/ace/worker-json.js
    .js
  • bin/Ace/js/ace/worker-lua.js
    .js
  • bin/Injector/CeleryInject.dll
    .dll windows:6 windows x64 arch:x64

    7baee90949f0a73b1fb92575e8e5ab47


    Headers

    Imports

    Exports

    Sections

  • bin/Injector/SecureEngineSDK64.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • bin/Injector/VMProtectSDK64.dll
    .dll windows:5 windows x64 arch:x64

    1851ff453adce0cef5274e320d5bed3c


    Headers

    Imports

    Exports

    Sections

  • bin/Monaco/assets/codicon.ff6b888d.ttf
  • bin/Monaco/assets/editor.worker.3080eea8.js
    .js
  • bin/Monaco/assets/index.92e0fbd0.js
    .js
  • bin/Monaco/assets/stylua_wasm_bg.944f0ccd.wasm
  • bin/Monaco/assets/theme.json
  • bin/Monaco/assets/vendor.2db22d1a.js
    .js
  • bin/Monaco/assets/vendor.f8cb9218.css
  • bin/Monaco/index.html
    .html
  • bin/lsp/.luaurc
  • bin/lsp/en-us.json
  • bin/lsp/globalTypes.d.lua
  • bin/lsp/libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    68b87f12e325f15066ee7b5b103c8814


    Headers

    Imports

    Exports

    Sections

  • bin/lsp/luau-lsp.exe
    .exe windows:6 windows x64 arch:x64

    8aca763be965db93ac92d00c4f485038


    Headers

    Imports

    Sections

  • bin/lsp/main.exe
    .exe windows:6 windows x64 arch:x64

    4d0fb8dc9ee470058274f448bebbb85f


    Headers

    Imports

    Exports

    Sections

  • bin/lsp/main.js
    .js
  • bin/lsp/wow.luaurc
  • runtimes/win-x64/lib/netcoreapp3.1/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    f1d445309fd1f2bf34493f21bbbd8cb4


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/lib/netcoreapp3.1/CefSharp.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • runtimes/win-x64/lib/netcoreapp3.1/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • runtimes/win-x64/lib/netcoreapp3.1/Ijwhost.dll
    .dll windows:6 windows x64 arch:x64

    4b134abe799aa60f4382986016d48441


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    3e7d3c8711de0e2c5d984fc8ff2b0fc9


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/CefSharp.BrowserSubprocess.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • runtimes/win-x64/native/CefSharp.BrowserSubprocess.exe
    .exe windows:6 windows x64 arch:x64

    8541289ad805913417662883d15a837d


    Headers

    Imports

    Sections

  • runtimes/win-x64/native/CefSharp.BrowserSubprocess.runtimeconfig.json
  • runtimes/win-x64/native/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • runtimes/win-x64/native/Ijwhost.dll
    .dll windows:6 windows x64 arch:x64

    4b134abe799aa60f4382986016d48441


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/chrome_100_percent.pak
  • runtimes/win-x64/native/chrome_200_percent.pak
  • runtimes/win-x64/native/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/icudtl.dat
  • runtimes/win-x64/native/libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/locales/af.pak
  • runtimes/win-x64/native/locales/am.pak
  • runtimes/win-x64/native/locales/ar.pak
  • runtimes/win-x64/native/locales/bg.pak
  • runtimes/win-x64/native/locales/bn.pak
  • runtimes/win-x64/native/locales/ca.pak
  • runtimes/win-x64/native/locales/cs.pak
  • runtimes/win-x64/native/locales/da.pak
  • runtimes/win-x64/native/locales/de.pak
  • runtimes/win-x64/native/locales/el.pak
  • runtimes/win-x64/native/locales/en-GB.pak
  • runtimes/win-x64/native/locales/en-US.pak
  • runtimes/win-x64/native/locales/es-419.pak
  • runtimes/win-x64/native/locales/es.pak
  • runtimes/win-x64/native/locales/et.pak
  • runtimes/win-x64/native/locales/fa.pak
  • runtimes/win-x64/native/locales/fi.pak
  • runtimes/win-x64/native/locales/fil.pak
  • runtimes/win-x64/native/locales/fr.pak
  • runtimes/win-x64/native/locales/gu.pak
  • runtimes/win-x64/native/locales/he.pak
  • runtimes/win-x64/native/locales/hi.pak
  • runtimes/win-x64/native/locales/hr.pak
  • runtimes/win-x64/native/locales/hu.pak
  • runtimes/win-x64/native/locales/id.pak
  • runtimes/win-x64/native/locales/it.pak
  • runtimes/win-x64/native/locales/ja.pak
  • runtimes/win-x64/native/locales/kn.pak
  • runtimes/win-x64/native/locales/ko.pak
  • runtimes/win-x64/native/locales/lt.pak
  • runtimes/win-x64/native/locales/lv.pak
  • runtimes/win-x64/native/locales/ml.pak
  • runtimes/win-x64/native/locales/mr.pak
  • runtimes/win-x64/native/locales/ms.pak
  • runtimes/win-x64/native/locales/nb.pak
  • runtimes/win-x64/native/locales/nl.pak
  • runtimes/win-x64/native/locales/pl.pak
  • runtimes/win-x64/native/locales/pt-BR.pak
  • runtimes/win-x64/native/locales/pt-PT.pak
  • runtimes/win-x64/native/locales/ro.pak
  • runtimes/win-x64/native/locales/ru.pak
  • runtimes/win-x64/native/locales/sk.pak
  • runtimes/win-x64/native/locales/sl.pak
  • runtimes/win-x64/native/locales/sr.pak
  • runtimes/win-x64/native/locales/sv.pak
  • runtimes/win-x64/native/locales/sw.pak
  • runtimes/win-x64/native/locales/ta.pak
  • runtimes/win-x64/native/locales/te.pak
  • runtimes/win-x64/native/locales/th.pak
  • runtimes/win-x64/native/locales/tr.pak
  • runtimes/win-x64/native/locales/uk.pak
  • runtimes/win-x64/native/locales/ur.pak
  • runtimes/win-x64/native/locales/vi.pak
    .ps1
  • runtimes/win-x64/native/locales/zh-CN.pak
  • runtimes/win-x64/native/locales/zh-TW.pak
  • runtimes/win-x64/native/resources.pak
  • runtimes/win-x64/native/snapshot_blob.bin
  • runtimes/win-x64/native/v8_context_snapshot.bin
  • runtimes/win-x64/native/vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/vk_swiftshader_icd.json
  • runtimes/win-x64/native/vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections

  • runtimes/win/lib/net8.0/System.Management.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections