Resubmissions

26/07/2024, 09:06

240726-k2ts4ssbnb 10

20/06/2024, 20:05

240620-yts4havhph 10

Analysis

  • max time kernel
    1764s
  • max time network
    1137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/07/2024, 09:06

General

  • Target

    GlobalProtect64/jre/lib/jrt-fs.jar

  • Size

    103KB

  • MD5

    3734e952e4d0fd7203b8e83bc4af1770

  • SHA1

    acbf50b27cdc0bca240e06ff35f02ade48c69d08

  • SHA256

    2259ea051efbbd2b607df64424795f4692e31cc1b1c81c05e147d1fb403da099

  • SHA512

    4768b4a5d29da0bebc8fc404d35216a1de1e6d1e102f13714cf7786b2ccc1c2bf345c9f77343106510adcf3f340bf71f9bf7c62c534997fc024fabebc2247e58

  • SSDEEP

    1536:/oB0aDMc6noBGjLReZtX7+3FzTlmdKTUtDSd0v+31UHK+ojbdIceZ+KCF:wB0s0z/R9lQdEjd00+ojbdi+KS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\GlobalProtect64\jre\lib\jrt-fs.jar
    1⤵
      PID:3852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3852-2-0x0000014449840000-0x0000014449AB0000-memory.dmp

      Filesize

      2.4MB

    • memory/3852-11-0x0000014448040000-0x0000014448041000-memory.dmp

      Filesize

      4KB

    • memory/3852-12-0x0000014449840000-0x0000014449AB0000-memory.dmp

      Filesize

      2.4MB