Overview

overview

10

Static

static

10

GlobalProt...th.dll

windows7-x64

1

GlobalProt...th.dll

windows10-2004-x64

1

GlobalProt...64.dll

windows7-x64

1

GlobalProt...64.dll

windows10-2004-x64

1

GlobalProt...ip.dll

windows7-x64

1

GlobalProt...ip.dll

windows10-2004-x64

1

GlobalProt...fs.jar

windows7-x64

1

GlobalProt...fs.jar

windows10-2004-x64

1

GlobalProt...er.jar

windows7-x64

1

GlobalProt...er.jar

windows10-2004-x64

1

GlobalProt...ce.dll

windows7-x64

3

GlobalProt...ce.dll

windows10-2004-x64

3

GlobalProt...ce.dll

windows7-x64

5

GlobalProt...ce.dll

windows10-2004-x64

5

GlobalProt...n.html

windows7-x64

3

GlobalProt...n.html

windows10-2004-x64

5

GlobalProt...EN.exe

windows7-x64

1

GlobalProt...EN.exe

windows10-2004-x64

1

GlobalProt...N.html

windows7-x64

3

GlobalProt...N.html

windows10-2004-x64

5

GlobalProt...W.html

windows7-x64

3

GlobalProt...W.html

windows10-2004-x64

5

GlobalProt...im.dll

windows7-x64

5

GlobalProt...im.dll

windows10-2004-x64

5

GlobalProt...sc.dll

windows7-x64

5

GlobalProt...sc.dll

windows10-2004-x64

5

GlobalProt....1.jar

windows7-x64

1

GlobalProt....1.jar

windows10-2004-x64

1

GlobalProt....0.jar

windows7-x64

7

GlobalProt....0.jar

windows10-2004-x64

7

GlobalProt....0.jar

windows7-x64

1

GlobalProt....0.jar

windows10-2004-x64

1

Resubmissions

26/07/2024, 09:06

240726-k2ts4ssbnb 10

20/06/2024, 20:05

240620-yts4havhph 10

Analysis

  • max time kernel
    1357s
  • max time network
    1149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/07/2024, 09:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    GlobalProtect64/suit/1979.1.503/jna-5.7.0.jar

  • Size

    1.6MB

  • MD5

    9407511359ce07f4f2e1bafd87f3059d

  • SHA1

    525fac90c2c6d373dc23b4aea97134f56effa6d0

  • SHA256

    2633cafdd9ce22b753d5851a2bfeac40a5bc6d2178f723583a7b476eff589e5d

  • SHA512

    15b780096df7927b1739046895738de7c6f5585668276592c6066a2ef9bb1f746c74bce89559d51ec94faa3ff18d9d9579bbd96e4f038bf5c7e9521e6e54240d

  • SSDEEP

    49152:gk20tgHQEDp7r/Z6kvMw5Y1CGHfaw9EFMTAklgShYhbtdXhzY:gj0tgwEDdZh9qHfagE6eKw7hzY

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\GlobalProtect64\suit\1979.1.503\jna-5.7.0.jar
    1⤵
    • Loads dropped DLL
    PID:3208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna96625320383646521.dll
    Filesize

    248KB

    MD5

    a004906b9067501293107be3a92c3401

    SHA1

    ed9f50de6051aaa1f26e61c64a5c6b0eba407d93

    SHA256

    76f19b52423774932831dcba0596989ec56213f9b217a0432fbc122f99704a2a

    SHA512

    86ad9b89c816d1e1e9215eb6f6852707628a4897168b66b792e655405c914696799538335d33244838940afcd9bd1bad842f8a3b004ef55bbdd1146c09a37003

    Download Submit

  • memory/3208-2-0x0000024D629D0000-0x0000024D62C40000-memory.dmp

    Filesize

    2.4MB

    Download

  • memory/3208-11-0x0000024D629B0000-0x0000024D629B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3208-26-0x0000024D629B0000-0x0000024D629B1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3208-27-0x0000024D629D0000-0x0000024D62C40000-memory.dmp

    Filesize

    2.4MB

    Download