3398ac3251b38a4a0376d1310e73ac89fa0aed631999514f4de31691d3e0a824 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

CelWare V.1.1.0.zip

windows10-2004-x64

1

CelWare V.1.1.0.zip

windows11-ltsc_2024-x64

1

CelWare V....er.exe

windows10-2004-x64

1

CelWare V....er.exe

windows11-ltsc_2024-x64

1

CelWare V....on.txt

windows10-2004-x64

1

CelWare V....on.txt

windows11-ltsc_2024-x64

1

CelWare V....gn.exe

windows10-2004-x64

5

CelWare V....gn.exe

windows11-ltsc_2024-x64

5

CelWare V....re.exe

windows10-2004-x64

1

CelWare V....re.exe

windows11-ltsc_2024-x64

1

CelWare V....re.exe

windows10-2004-x64

8

CelWare V....re.exe

windows11-ltsc_2024-x64

8

CelWare V....re.pdb

windows10-2004-x64

3

CelWare V....re.pdb

windows11-ltsc_2024-x64

3

CelWare V....g.json

windows10-2004-x64

3

CelWare V....g.json

windows11-ltsc_2024-x64

3

CelWare V....it.dll

windows10-2004-x64

1

CelWare V....it.dll

windows11-ltsc_2024-x64

1

CelWare V....PI.dll

windows10-2004-x64

1

CelWare V....PI.dll

windows11-ltsc_2024-x64

1

Analysis

max time kernel
298s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 06:36

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

CelWare V.1.1.0.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

CelWare V.1.1.0.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

CelWare V.1.1.0/Bin/Decompiler.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

CelWare V.1.1.0/Bin/Decompiler.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

CelWare V.1.1.0/Bin/current_version.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

CelWare V.1.1.0/Bin/current_version.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

CelWare V.1.1.0/Bin/erto3e4rortoergn.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral8

Sample

CelWare V.1.1.0/Bin/erto3e4rortoergn.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral9

Sample

CelWare V.1.1.0/CelWare.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

CelWare V.1.1.0/CelWare.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

CelWare V.1.1.0/CelWare.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral12

Sample

CelWare V.1.1.0/CelWare.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral13

Sample

CelWare V.1.1.0/CelWare.pdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

CelWare V.1.1.0/CelWare.pdb

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

Behavioral task

behavioral15

Sample

CelWare V.1.1.0/CelWare.runtimeconfig.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

CelWare V.1.1.0/CelWare.runtimeconfig.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

Behavioral task

behavioral17

Sample

CelWare V.1.1.0/ICSharpCode.AvalonEdit.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

CelWare V.1.1.0/ICSharpCode.AvalonEdit.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

CelWare V.1.1.0/QuorumAPI.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

CelWare V.1.1.0/QuorumAPI.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target
CelWare V.1.1.0/QuorumAPI.dll
Size 369KB
Sample260810-hc2fjsshne
SHA256 3398ac3251b38a4a0376d1310e73ac89fa0aed631999514f4de31691d3e0a824
MD5 233f688c757358ed5f97c76b8be88391
SHA1 3dfc2f7d8aeb041b2016eb090688c1ba6308b865
SHA512 e697a91e0fb4a4a541b94a7448688243aef0071e46158f8a956d8f7d94b072939b4e5c2d52e6eba292d0d87d5cc44afba880cc4f3959f3b2975427c7be9db63b
SSDEEP 6144:0VwvTjHVVV9Qv0vspvhICzZxkNJsnlz5:0VwvHHVVV9Qv0vspOCzZxo
TLSH
T10184DE03AF449B11CA6C343A82FB2D2C63A1F5CB1771891FDF057AA71CD62A69DCD246
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\CelWare V.1.1.0\QuorumAPI.dll",#1
1⤵
PID:4852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy