Overview

overview

10

Static

static

10

BetterFold...er.dll

windows7-x64

1

BetterFold...er.dll

windows10-2004-x64

1

CeleryBoot...er.exe

windows7-x64

10

CeleryBoot...er.exe

windows10-2004-x64

10

CeleryIn.dll

windows7-x64

1

CeleryIn.dll

windows10-2004-x64

1

CeleryInject.exe

windows7-x64

1

CeleryInject.exe

windows10-2004-x64

1

Costura.dll

windows7-x64

1

Costura.dll

windows10-2004-x64

1

Dragablz.dll

windows7-x64

1

Dragablz.dll

windows10-2004-x64

1

MaterialDe...rs.dll

windows7-x64

1

MaterialDe...rs.dll

windows10-2004-x64

1

MaterialDe...ns.dll

windows7-x64

1

MaterialDe...ns.dll

windows10-2004-x64

1

Microsoft....re.dll

windows7-x64

1

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....ms.dll

windows7-x64

1

Microsoft....ms.dll

windows10-2004-x64

1

Microsoft....pf.dll

windows7-x64

1

Microsoft....pf.dll

windows10-2004-x64

1

Microsoft....rs.dll

windows7-x64

1

Microsoft....rs.dll

windows10-2004-x64

1

System.Dia...ce.dll

windows7-x64

1

System.Dia...ce.dll

windows10-2004-x64

1

bin/Monaco/index.html

windows7-x64

3

bin/Monaco/index.html

windows10-2004-x64

3

bin/Monaco...ain.js

windows7-x64

3

bin/Monaco...ain.js

windows10-2004-x64

3

bin/Monaco...tes.js

windows7-x64

3

bin/Monaco...tes.js

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/10/2024, 19:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CeleryInject.exe

  • Size

    5.5MB

  • MD5

    072bd8b0166f4e8c134fddd1a91b16c6

  • SHA1

    da0e078b22b6739eb2ae67ef3dd7ac7ee841f96c

  • SHA256

    f84e39b3be2ba74691b82dab25a4d42d13535f138d9c69ffe37d45d90612a34f

  • SHA512

    5ff3173c47a7718c41076507a5c3d8e83021928dead3c82ce6e46b4609afa6ffa4af7cd4af1b779805c00ccd5b9ee5a59144c0507bb17db8fad77b0e144ee828

  • SSDEEP

    49152:uACTPFe76hHoYwVbV+huHplzrvTAm+DGjV1ykc+nPsbn3+nM6Pzs0dn3dnndn+dF:WwHpoe6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CeleryInject.exe
    "C:\Users\Admin\AppData\Local\Temp\CeleryInject.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads