7b4619c6841b07dd3045fcf718307040c466e2a3460c102bbef0141a7e0c1164

Submit
Reports

Overview

overview

Static

static

MaltegoSet....1.exe

windows11-21h2-x64

$PLUGINSDI...sh.dll

windows11-21h2-x64

$PLUGINSDI...nu.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...gs.dll

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

v4.8.1/bin/maltego

windows11-21h2-x64

v4.8.1/bin...go.exe

windows11-21h2-x64

v4.8.1/ext...pg.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...14.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro...or.jar

windows11-21h2-x64

v4.8.1/gro...vy.jar

windows11-21h2-x64

v4.8.1/ide...19.jar

windows11-21h2-x64

v4.8.1/ide...18.jar

windows11-21h2-x64

v4.8.1/ide....2.jar

windows11-21h2-x64

v4.8.1/mal...ud.jar

windows11-21h2-x64

v4.8.1/mal...pt.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...er.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...tz.jar

windows11-21h2-x64

v4.8.1/mal...es.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...re.jar

windows11-21h2-x64

v4.8.1/mal...to.jar

windows11-21h2-x64

v4.8.1/mal...ry.jar

windows11-21h2-x64

v4.8.1/mal...js.jar

windows11-21h2-x64

Resubmissions

05-11-2024 19:35

241105-ya6v9axapf 7

05-11-2024 19:29

241105-x7dqasxglr 7

Analysis

max time kernel
84s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
05-11-2024 19:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

MaltegoSetup.v4.8.1.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/Splash.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

v4.8.1/bin/maltego

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

v4.8.1/bin/maltego.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

v4.8.1/extra/modules/bcpg.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

v4.8.1/extra/modules/org-netbeans-html-ko4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

v4.8.1/extra/modules/org-netbeans-html-xhr4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

v4.8.1/extra/modules/slf4j-jdk14.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

v4.8.1/groovy/modules/ext/groovy-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

v4.8.1/groovy/modules/ext/groovy-ant-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

v4.8.1/groovy/modules/org-netbeans-modules-groovy-editor.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

v4.8.1/groovy/modules/org-netbeans-modules-libs-groovy.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

v4.8.1/ide/modules/ext/commons-compress-1.19.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

v4.8.1/ide/modules/ext/jcodings-1.0.18.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

v4.8.1/ide/modules/ext/lucene-core-3.6.2.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-cloud.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-graalvm-javascript.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-recovery-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-entity-serializer.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-archive-mtz.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-certificates.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-chatapi.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-core.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-crypto.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-discovery.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

v4.8.1/maltego-core-platform/modules/ext/com.maltego.graalvm-javascript/org-graalvm-js/js.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-certificates.jar
Size

75KB
MD5

4c93aa7b6ec151e2e035a1e43d37ff3c
SHA1

bed36ad66148fb924e4a07d93959212c478f47c3
SHA256

5be7e5b313621bc4e93c89710043e035e2d63cef5843b160d6701997e3e56ed2
SHA512

26a9b85bb68602c7b5b974b001d0cbbdaa96e0037e955146d20acbd1de8f7508993a0ea4ffb660cde99bbfeaaf3a690d506cb6e1ae457149bba443461bc30865
SSDEEP

1536:994VV/uMHhqFs+vaOdvQ5UEGqGSqOwivJ5rGQfNi:EVVpHhSs+pvQOq5qOZJRGQFi

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\v4.8.1\maltego-core-platform\modules\com-paterva-maltego-certificates.jar
1⤵
PID:4016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4016-2-0x0000022A9FDF0000-0x0000022AA0060000-memory.dmp

Filesize
2.4MB

Download
memory/4016-11-0x0000022A9E590000-0x0000022A9E591000-memory.dmp

Filesize
4KB

Download
memory/4016-12-0x0000022A9FDF0000-0x0000022AA0060000-memory.dmp

Filesize
2.4MB

Download