4c20c73a210a225e3a6eb5120c86e9c09af5a80dd98d09fb7f7fcdc33301b020

Sharing

Copy URL Twitter E-mail

General

Target
Celery-2.1.2.zip
Size 155.3MB
Sample260730-tld76aca25
SHA256 4c20c73a210a225e3a6eb5120c86e9c09af5a80dd98d09fb7f7fcdc33301b020
MD5 603a84399db0cd168d61be4984e28fc9
SHA1 d352c7d8de3d09d70f7a2a6749b3843dd10d1038
SHA512 5062f281c2b695e342891ac9626d91e57bc3906525d71a4d05a12d822d08679399744e6db60868992758736960b32856037e641f586ff76c98d77f9cb7c81d60
SSDEEP 3145728:TRgrnmWaKjDiy5bC0w+LMfLAvQkRo9kExspaNlEEWbyWlH7k3iUId1rYuH/sBg3p:TRgrPakDFbC0nMfL5kC9kExadEWbyWlt
TLSH
T117783322B072F7865D9EB302E6E00150E1B20E97766358E7F4EDD46063939C26E6CF5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Celery.dll
- Size 19.4MB
- SHA256 7855f351b178ba43031fe85836f0cc47261c74cfd63120aca30c110054d01fa9
- MD5 133991c55c7a5cc4a0bf3aad679b004b
- SHA1 aa7181af6b8c67fe91c1b2e116fd11da357ed8d6
- SHA512 060c4390147d6d61ba71b414209b238d1197c7c034f4b3b11e0647d0c5f9a25f8fa07d6316fb4cd13aa3065068f07643da3c36c51f02b8c540d960bdd0ec5be0
- SSDEEP 393216:Ybu8hy57DdNAuyvw4wK/gsrlVwgqI59D8exrbwANXg5yH4LVvIoE4Vrevn:Wy1d2toVKrR5qI59woPXlOLmCKv
- TLSH
  T16327239D766072DFC85BC472CEA81DA4FB6064BB931B4203902756ADEE4D88BCF154F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Celery.exe
- Size 178KB
- SHA256 0e4c80c3571f4000a63c26ddd581907eb79f7bd2ac7ecb1953be66e3715c175f
- MD5 8073fedb005fec2949b3720af8421dd7
- SHA1 347097dfbfc78a84ff40fb6ffd45011243961ae3
- SHA512 4182c56a74d53d844eded7d858d7e6a50c794c47072ceea90bb6eb651568ba46af5d7066779fb7b82a13e52211669a4b980f309122a3cba9b6263e02547b33cb
- SSDEEP 3072:niS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJm8ltIbpmcC80FTOJRqY:niS4ompB9S3BZi0a1G78IVhcIctIbIbf
- TLSH
  T1A0045B07B2A801FCD1BBA37899A21A01F777B8554B3197CF1390863B1F67AC09E7A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral2
- Target
  runtimes/win-x64/lib/netcoreapp3.1/CefSharp.Core.Runtime.dll
- Size 1.7MB
- SHA256 10e0e487229a8896afcb3c8e08a70eda7435ab373c23d262b0a8b4bb92a81c59
- MD5 2417da3b3dfe8da0754d203072d8e2af
- SHA1 95dcc22396a1c69273e16004dea8ab8d7a9a7078
- SHA512 9bbe0f0c19dd5b8a8eeeced0868ffc3ad8e392b1d2365052b09293417b384cc7dd7ddf35c84f8d2796a15c68682a9b3876ba7321ebc264a53e4fbf733b9ae382
- SSDEEP 49152:tlbv35N4GOkDAqcHCgrZi5P9xh0UsWLgiHesm2qCUD/yNWYxtYtUkjCKfL62gQkt:/v
- TLSH
  T1BD852B2933AA0622E6AB967EC0A74753D637A8057355F3C7E40193251F9B7C84B3F21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  runtimes/win-x64/lib/netcoreapp3.1/CefSharp.Core.dll
- Size 1.1MB
- SHA256 7bacce6f9060a583844ec676b618f92ddf1cf94435793d7f0e85f40e52112151
- MD5 84c0ab60422ec79d462a4d37a1c9bb25
- SHA1 5f8ce54c20bfd3a98b9526fec0c4319176f11238
- SHA512 5b9e4f4ef5760c32fbc716396a51ec6b6a050f191c1c16b8a75d7309b8827dbea498614b86e1fa6aacdeccfe6f585c869b91d0baaeb082faf3a6d2f33b62a7fa
- SSDEEP 12288:ou3w1WxPexxMcEzWfOL1+p3WqxEm5m7lQ/Sqm7nLLSVxa3gdCUtfF6DKNWovV:WxD2B+pmARm7lQ6qmTnCa3kFtL
- TLSH
  T113452961FBA58E6ECD9A0671E33006290235E2053609F3BD4B94999F3E96F48DC065FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  runtimes/win-x64/lib/netcoreapp3.1/CefSharp.dll
- Size 597KB
- SHA256 0c9c02a8d0244a6c5153636cba325a38c5f3573dc1668c766d6aa5d9eaa49077
- MD5 13554080a5c0e2bf369b13ec67c9b467
- SHA1 c1a2472620ecedb44897b677c2d9a96a43db4f4e
- SHA512 186a087819f8efd70596b70a6100532fb4c39eebbc8ca62a78ea9c7c772651bd73b688fa45d87248e36e484534c3ca923e7a8a8c71202291fde80d16402a6833
- SSDEEP 12288:BcSOerdnK3w1CUSsWo/lWZR+OKbd9rav/MNSgD87/f:CL2nKgdtaEf3ravP7/
- TLSH
  T16CD4BF0163E9D227E7FA2B39B8B2041D467FF889B031D39D4908551D5BA3B89AC53B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  runtimes/win-x64/lib/netcoreapp3.1/Ijwhost.dll
- Size 148KB
- SHA256 763f9e534343cbefe379cafc885486900cba42a2aca23bc697861780b4f4517f
- MD5 e5ef63c22b9f67738215064397f80339
- SHA1 e7aaa1b7cb4e520428c46794ec6327da7165f24c
- SHA512 788e839bebbf672ce86b05ce81fe4f2684921b81f96a7bf1e77db4b538aef8b43dccf290dd3867ee881e5f6538c3fc2a992b40c53e26fb27a230220e926b3005
- SSDEEP 3072:GpK6Fuav6SiHRPK7NlnWlCeztPYKJhM6aHLmwngbIL6D/h8X5B/+:gwScTnM6aHLmwtL6qXX2
- TLSH
  T17CE34B0BB2AD00BAE0A7E17884938E46F77A781A437197CF0790466F1FA77E49D39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  runtimes/win-x64/native/CefSharp.BrowserSubprocess.Core.dll
- Size 1.1MB
- SHA256 498b656ebb293cea7e6ef9971194b782fc8e719789ff35d07bca40631f63dc0f
- MD5 d3e33fce426a3c574710677ba8203664
- SHA1 4a2f2722952cae648a010c8bb389954bbd3fdc96
- SHA512 4b375752ef907e5b4bb1a9fbb28eedae44dc629605d82b49d1256bbacde0071898886f4b2dbb7b99ec146ef077fc1ed26869d9d6e8ee9b4f23743728bffc3a73
- SSDEEP 24576:06/SgHOV4PrLv62PFAJkslrNMXBDjFEffx8Svagls0veLCJ2ZiVwhEDssQjPc8DN:1K8Kls0veLCJ2ZiVwhEDssQjPc8DnXou
- TLSH
  T16C35292922AE0A92F6FBD63DC5A38A41D7777D016325D7C7800583125F8BBDC99BF221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  runtimes/win-x64/native/CefSharp.BrowserSubprocess.dll
- Size 13KB
- SHA256 27b383502d602d90aea3160f05a76fa07cd5fa99d16f8f90b72669f30a3a767f
- MD5 04efd2c0413b7b98bb40835473e80662
- SHA1 a98b9bdc74d51055dc5efecb18d8084825ff6cf4
- SHA512 501b8228c1080727c2a133a79123e1bc280ec84725811bb3cad0ccc6a463a830cefc60fc488e24a414c6afde31715382f8011cd47beeb52da945efd25fd3caf7
- SSDEEP 384:nDM3mQBz8DcKl/sk4/6GnIvLcZsAYcXeS:I2QCLqIQeAYcXeS
- TLSH
  T17D527D52C7A8A271F3F647773C3646019F32BA07991F5AF8744D425AAF2AE50C813353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  runtimes/win-x64/native/CefSharp.BrowserSubprocess.exe
- Size 156KB
- SHA256 b1be9eee4364525f924cc398a7faadd81451c3d9659d7a2b0abbdf71bc085a43
- MD5 e908e378ed467eed0641e9add8a41610
- SHA1 a24db6bceeb5e1f94dd5bfceccf012eb6d5e1787
- SHA512 5346f2ae4a6df90277dc295e5a4e0ff1a89d9b635f3532fb5ceee2a97fe969d342476e71f655ac336beb5d01b8d4ff4c90bdf8886b856bfee0bbc091764e7134
- SSDEEP 3072:xtL04G/O4BDom5hWkNX2xlkHmJRqAnoqOAcRRwo4wqYrXKAS:UxX5URji7CYrXRS
- TLSH
  T138F3170772A901F8E1A7E27889A71A01F3BA7816477197CF0390467B1F73BE49E76361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  runtimes/win-x64/native/CefSharp.dll
- Size 597KB
- SHA256 0c9c02a8d0244a6c5153636cba325a38c5f3573dc1668c766d6aa5d9eaa49077
- MD5 13554080a5c0e2bf369b13ec67c9b467
- SHA1 c1a2472620ecedb44897b677c2d9a96a43db4f4e
- SHA512 186a087819f8efd70596b70a6100532fb4c39eebbc8ca62a78ea9c7c772651bd73b688fa45d87248e36e484534c3ca923e7a8a8c71202291fde80d16402a6833
- SSDEEP 12288:BcSOerdnK3w1CUSsWo/lWZR+OKbd9rav/MNSgD87/f:CL2nKgdtaEf3ravP7/
- TLSH
  T16CD4BF0163E9D227E7FA2B39B8B2041D467FF889B031D39D4908551D5BA3B89AC53B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  runtimes/win-x64/native/Ijwhost.dll
- Size 148KB
- SHA256 763f9e534343cbefe379cafc885486900cba42a2aca23bc697861780b4f4517f
- MD5 e5ef63c22b9f67738215064397f80339
- SHA1 e7aaa1b7cb4e520428c46794ec6327da7165f24c
- SHA512 788e839bebbf672ce86b05ce81fe4f2684921b81f96a7bf1e77db4b538aef8b43dccf290dd3867ee881e5f6538c3fc2a992b40c53e26fb27a230220e926b3005
- SSDEEP 3072:GpK6Fuav6SiHRPK7NlnWlCeztPYKJhM6aHLmwngbIL6D/h8X5B/+:gwScTnM6aHLmwtL6qXX2
- TLSH
  T17CE34B0BB2AD00BAE0A7E17884938E46F77A781A437197CF0790466F1FA77E49D39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  runtimes/win-x64/native/chrome_elf.dll
- Size 1.3MB
- SHA256 7a96d50d91310903f591478e7d1513be5689f1ecf59fe752fbaa6cb4ba8820ce
- MD5 fbebc1cb517049c6f729915ae5eee9ff
- SHA1 f47542f095636048d092d51a12eb421bdfafd762
- SHA512 fb2ff249291da347c5671151cbaa59a0ef028aaee2afd547884e806af47eda52efd4a7fc9b74e648c84707e74ee317d284d4ba90f469bda45cf83b6ad8a2e70c
- SSDEEP 24576:xAx75kOcizYYHSb+snWTMWvPF7IbxK/d9ts5Qf3a:SNk9YHSb+snWT3vRyKl7sY
- TLSH
  T114558C17B2D981A9D06ED17487578236EA727C420B34BADF0390B6192E77FE46B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  runtimes/win-x64/native/d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  runtimes/win-x64/native/dxcompiler.dll
- Size 21.0MB
- SHA256 b502396ab06123c7989e89e2b1c6a54d4ffb1624d972849fbf4952661ced6ed4
- MD5 5e0d0f24d48514aeb629fcc80afcd23b
- SHA1 b8b4a78c9a10ecbfd48197cd45f60e3882fcc7d0
- SHA512 9dea4e038bc7ffd55416174c3a856d6dcf71a64f45cf57044640ff6e1d10afffd40bcf64e17cfdfb526f642c952f4f28ee2a433adcd351eb98033d30c04e374e
- SSDEEP 393216:vShUiwqmrjOjD0KhMdEi1jBVRJRoEIwNH3Sug9YixQwce75lCaWMTJunLzCUvQS2:4CF+i0R
- TLSH
  T132272A12768658ADF05EC8B083478963CE6434CB1F3ABDEF449452292F7BAF41B3D625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  runtimes/win-x64/native/dxil.dll
- Size 1.4MB
- SHA256 a5fe1d8d9caa2ff29daffd53f73a9a4e19c250351b2abe4fc7b57e60ce67ac68
- MD5 30da04b06e0abec33fecc55db1aa9b95
- SHA1 de711585acfe49c510b500328803d3a411a4e515
- SHA512 67790874377e308d1448d0e41df9dd353a5f63686df4eb9a8e70a4da449b0c63a5d3655ab38d24b145ad3c57971b1c6793ea6c5ac2257b6eb2e8964a44ab0f08
- SSDEEP 24576:+Cfhbh3v3mtZDiAQeWj26k41ob2nrZ1rqpegQDJqoZtp22GkmgA9u808jQPEdkrt:+Cfhbh3v3mtEAQrW41obCraeRhy9ou6f
- TLSH
  T18F658D1B629801B5D4BBD178DE578E0BE6B2B41503709BCF12F006A62F2BBF55A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  runtimes/win-x64/native/libEGL.dll
- Size 461KB
- SHA256 e8356f3a7b74eecf2b2e6354c5437f8e8afc91e3441b5f32ef1ae69876c2a70e
- MD5 c9914ba5a1ce274eb6625783a2507d04
- SHA1 d6532769512e6286d77153c830bc75a01bfe94a2
- SHA512 a51731b2a81972ef5e105731d7db41794ab883dd4cfccb23be5d2202a348b059291ee06a39e3c65c04ea721f9337e01bd7e302c02a633f3b8a0b163ebbee058d
- SSDEEP 6144:AR4rPHPDgnnieb24pFsYVOcPqfuKbc0RnvDmnoCc:3HP0nniebFrV9qfuKbPRnvshc
- TLSH
  T178A47C1177A448A8E02BC478CA534643EA76B4960F65E6DF02E4D3792F7BBE85B39310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  runtimes/win-x64/native/libGLESv2.dll
- Size 7.7MB
- SHA256 e82e14ceedd46fd2c4096e222cdd3f79f296c7c465d58f31c3b6a8f96e29d0a1
- MD5 276559e8a58b80f15b1f7d77f99041a2
- SHA1 de884b3a1af0b614717a67bcc9d625ac130ab983
- SHA512 82cec78ca9988a56ea9d05e7dd54e2b387afbd1379fd03856477af061410cbb26844ff53311f210195877bc8382422f25dad32136125e44fc2ac4a0c1d6a8a35
- SSDEEP 49152:fYLblCddO+Omfv2DUgYddm1T5NoWiTA2m/syzon7pWwsXSYlUnY64gCENHWizx1g:TXuI+F8nWgF/I9mNEYeJzxXC3Ry7+
- TLSH
  T136866A03F29680D9C00DE2B8975B8223F63578950734B6DF269457192FB7BE0EB79B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  runtimes/win-x64/native/libcef.dll
- Size 206.6MB
- SHA256 2c2f49e705880ce003cdf381b04a312a352a0e7f0a68b8be82b3d488087e68be
- MD5 9da1be58e36b901c71f0cfe406d60040
- SHA1 db2698fba880bcc37a88ebc3a58d027572c65491
- SHA512 3425eed536d95386f8c0bac3d448e20e3eca968dcc11cbb7a7b349e9a876f561c39ed62cbda1edd670e4eee7f2983abb268384fe50d0670461716722f205f1a2
- SSDEEP 1572864:tosIB7ABP81IKbj4NxeV46KHtdnExFLUFCItbmG9CeAbxlh/iX+rXH9ybpeGv2pW:t/Hf3cbdqmxO2co
- TLSH
  T12CA88C03E69A40D9E04DD2B5A7979637EEB5B8850724B2DF07100B522F77EE42B3DB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  runtimes/win-x64/native/locales/vi.pak
- Size 657KB
- SHA256 4bbf8ad4ac4e63e5c7638cb3eb51810fe0118755a8cff1c91958aa4cd9801ec3
- MD5 1028db7c49e73c1ab1d728edec1f5494
- SHA1 8eea8cb44df8f7029f8440518316bfdd453a705f
- SHA512 1f2712f292052e062f19211267aad2007fc7cd43d3ac829b34f53c1b77b5441627ffe4eb2ac4473eaa797db0fb5a702f8c4a557947a3fd7e3639416540eb8536
- SSDEEP 12288:qRdBW0Yf+c/wJ2roEsGV63wueX09xzn4xs9FgGhx5WY8hI+8qiODLziKHhv0Zitp:qdWH+c/wJ2pVPuS09xwto5N8u+OODfiy
- TLSH
  T181E4741216E0702680AC553EC6CD540E6FCAE42FF7C18FE56FF429747A221A45F25BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  runtimes/win-x64/native/vk_swiftshader.dll
- Size 5.0MB
- SHA256 c38cba3d06c7bc462a0829c16b12942195041f1b74c76ec416226f7ba8bba2ff
- MD5 7e5e71d632718706275685c2e5c81e87
- SHA1 da6899dc3eac198b82ef8d4f1c65bd2305e89eaa
- SHA512 b5efade098475d7ca8301764eb8199ff96d21bc395193cb1fd86aac243bb55688b278998c2fe33f366e7db70420a282a511ea94ab4200d099afc322dd80359f6
- SSDEEP 49152:cf179HJyzaXrZ50w9JAkIEV4klO0eo12yqs2Jz8OAIV7MrO22vZirrmvyeF1oQ/H:mEzaXxQfvkPKDDxBr
- TLSH
  T1BD363803B1858099F05DD1B9875BA623F232BC811B76B6DF52A01F192E77FE06B39B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  runtimes/win-x64/native/vulkan-1.dll
- Size 929KB
- SHA256 98fbae8a9ec5965a0e27eed0c7fa77763e65bb4caea77593cc6a625a522575c2
- MD5 4e7f9ec7b9be393ec65cb59ec8990d67
- SHA1 f1c1f41b4008ee35a0897bdf119c1485191a0828
- SHA512 b2dda0306015d695b46c3c135bdd12d2c65c533aa2b6b2b3ad1a07936555e5b89292c347044e2c7655cec9a38201ac3383a9ffcb9fed6474020ead4ed4b12189
- SSDEEP 24576:pJBSWJw4Q8Zn65aSNw6Z5W1DYsHq6g3P0zAk7Sh:POv8Z6oSq6Z5W1DYsHq6g3P0zAk7S
- TLSH
  T1E2155D13AA948569D4768034DDC28607CAB178911726B9CF03A85B09BF6FFF43B3DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  runtimes/win/lib/net8.0/System.Management.dll
- Size 305KB
- SHA256 5a50030a4f73b948f0da1486682c09dce99593d1e5fa5e1740ecc053163ba507
- MD5 9efa1be3567695a9014d3a771b87884e
- SHA1 c43356c9d4cd1472aaa81554fba931c09db4c20b
- SHA512 8f7f3aa0fcc426b58bf836214596cddba68290e5bda69a70c147cf456308eda263d2860254893f00e4bb80d7335d7d39e4785f7c8c88e38d10dae6302f863a96
- SSDEEP 6144:Yyj+butGieusJEYE1SF7c39iwjwmppwbXV/ZqPJkot80ESxpt7jk:Y4+butGieusJE31Sht/kSExpVk
- TLSH
  T11B64162023F88A44E8BF5FB5A0702060CFB5775B2A6EDB9C4D917CED19B2740856732B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22