Overview
overview
7Static
static
3MaltegoSet....0.exe
windows7-x64
4MaltegoSet....0.exe
windows10-2004-x64
4$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3v4.6.0/bin/maltego
ubuntu-18.04-amd64
3v4.6.0/bin/maltego
debian-9-armhf
1v4.6.0/bin/maltego
debian-9-mips
1v4.6.0/bin/maltego
debian-9-mipsel
1v4.6.0/bin...go.exe
windows7-x64
1v4.6.0/bin...go.exe
windows10-2004-x64
7v4.6.0/gro....8.jar
windows7-x64
1v4.6.0/gro....8.jar
windows10-2004-x64
7v4.6.0/gro....8.jar
windows7-x64
1v4.6.0/gro....8.jar
windows10-2004-x64
7v4.6.0/gro...or.jar
windows7-x64
1v4.6.0/gro...or.jar
windows10-2004-x64
7v4.6.0/gro...vy.jar
windows7-x64
1v4.6.0/gro...vy.jar
windows10-2004-x64
7v4.6.0/ide...pg.jar
windows7-x64
1v4.6.0/ide...pg.jar
windows10-2004-x64
7v4.6.0/ide...ov.jar
windows7-x64
1v4.6.0/ide...ov.jar
windows10-2004-x64
7Analysis
-
max time kernel
18s -
max time network
1079s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
24-03-2024 03:07
Static task
static1
Behavioral task
behavioral1
Sample
MaltegoSetup.v4.6.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MaltegoSetup.v4.6.0.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/splash.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/splash.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
v4.6.0/bin/maltego
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral16
Sample
v4.6.0/bin/maltego
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral17
Sample
v4.6.0/bin/maltego
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral18
Sample
v4.6.0/bin/maltego
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
v4.6.0/bin/maltego.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
v4.6.0/bin/maltego.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
v4.6.0/groovy/modules/ext/groovy-3.0.8.jar
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
v4.6.0/groovy/modules/ext/groovy-3.0.8.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
v4.6.0/groovy/modules/ext/groovy-ant-3.0.8.jar
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
v4.6.0/groovy/modules/ext/groovy-ant-3.0.8.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
v4.6.0/groovy/modules/org-netbeans-modules-groovy-editor.jar
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
v4.6.0/groovy/modules/org-netbeans-modules-groovy-editor.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
v4.6.0/groovy/modules/org-netbeans-modules-libs-groovy.jar
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
v4.6.0/groovy/modules/org-netbeans-modules-libs-groovy.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
v4.6.0/ide/modules/bcpg.jar
Resource
win7-20240319-en
Behavioral task
behavioral30
Sample
v4.6.0/ide/modules/bcpg.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
v4.6.0/ide/modules/bcprov.jar
Resource
win7-20240319-en
Behavioral task
behavioral32
Sample
v4.6.0/ide/modules/bcprov.jar
Resource
win10v2004-20240226-en
General
-
Target
v4.6.0/bin/maltego
-
Size
6KB
-
MD5
28c9f461c5fe5afd017499087c76efc5
-
SHA1
989a2d7c78381ab18b15eeb301d9b58557bf26c6
-
SHA256
cb11c543367ad3f234cc9105ee19565311b8293d530a4526214621ea00418e10
-
SHA512
a8def7c2adcebe0cbe26c4ae00165e29c7dc257e019c0cf4ddf389d7ca3ef7c5ee6447d5dca074988292daf720a1f0c84c0aba584b0fd5726f83d5e48b176e78
-
SSDEEP
96:wUkkqCISsATgrYlEla0Tyjkke7lkziWsqp45zKJtyJySU3Zk3nAer6KvSGYsft:wrkNTAaGyjkgiWsqp45zKJt2YQySYsft
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems zenity
Processes
-
/tmp/v4.6.0/bin/maltego/tmp/v4.6.0/bin/maltego1⤵PID:1563
-
/usr/bin/dirnamedirname /tmp/v4.6.0/bin/maltego2⤵PID:1564
-
-
/usr/bin/basenamebasename /tmp/v4.6.0/bin/maltego2⤵PID:1565
-
-
/bin/unameuname2⤵PID:1566
-
-
/bin/unameuname2⤵PID:1567
-
-
/bin/unameuname2⤵PID:1568
-
-
/usr/libexec/java_home/usr/libexec/java_home2⤵PID:1569
-
-
/usr/local/sbin/zenityzenity --error "--title=Java Not Found" "--width=450" "--text=Please install Java to run Maltego. Visit docs.maltego.com for support."1⤵PID:1563
-
/usr/local/bin/zenityzenity --error "--title=Java Not Found" "--width=450" "--text=Please install Java to run Maltego. Visit docs.maltego.com for support."1⤵PID:1563
-
/usr/sbin/zenityzenity --error "--title=Java Not Found" "--width=450" "--text=Please install Java to run Maltego. Visit docs.maltego.com for support."1⤵PID:1563
-
/usr/bin/zenityzenity --error "--title=Java Not Found" "--width=450" "--text=Please install Java to run Maltego. Visit docs.maltego.com for support."1⤵
- Reads runtime system information
PID:1563