67edf175321f92df454c58fc64babaf1905a2843b0fe7105a3d5c6146c0e9898

Resubmissions

26/07/2024, 09:06

20/06/2024, 20:05

max time kernel
1559s
max time network
1563s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
26/07/2024, 09:06

Target

GlobalProtect64/suit/1979.1.503/jna-5.7.0.jar
Size

1.6MB
MD5

9407511359ce07f4f2e1bafd87f3059d
SHA1

525fac90c2c6d373dc23b4aea97134f56effa6d0
SHA256

2633cafdd9ce22b753d5851a2bfeac40a5bc6d2178f723583a7b476eff589e5d
SHA512

15b780096df7927b1739046895738de7c6f5585668276592c6066a2ef9bb1f746c74bce89559d51ec94faa3ff18d9d9579bbd96e4f038bf5c7e9521e6e54240d
SSDEEP

49152:gk20tgHQEDp7r/Z6kvMw5Y1CGHfaw9EFMTAklgShYhbtdXhzY:gj0tgwEDdZh9qHfagE6eKw7hzY

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2380	java.exe

C:\Windows\system32\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\GlobalProtect64\suit\1979.1.503\jna-5.7.0.jar
1⤵
- Loads dropped DLL
PID:2380

\Users\Admin\AppData\Local\Temp\jna-63116079\jna6486375611486561881.dll

Filesize
248KB

MD5
a004906b9067501293107be3a92c3401

SHA1
ed9f50de6051aaa1f26e61c64a5c6b0eba407d93

SHA256
76f19b52423774932831dcba0596989ec56213f9b217a0432fbc122f99704a2a

SHA512
86ad9b89c816d1e1e9215eb6f6852707628a4897168b66b792e655405c914696799538335d33244838940afcd9bd1bad842f8a3b004ef55bbdd1146c09a37003

Download Submit
memory/2380-2-0x00000000023C0000-0x0000000002630000-memory.dmp

Filesize
2.4MB

Download
memory/2380-21-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2380-22-0x00000000023C0000-0x0000000002630000-memory.dmp

Filesize
2.4MB

Download