7b4619c6841b07dd3045fcf718307040c466e2a3460c102bbef0141a7e0c1164

Submit
Reports

Overview

overview

Static

static

MaltegoSet....1.exe

windows11-21h2-x64

$PLUGINSDI...sh.dll

windows11-21h2-x64

$PLUGINSDI...nu.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...gs.dll

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

v4.8.1/bin/maltego

windows11-21h2-x64

v4.8.1/bin...go.exe

windows11-21h2-x64

v4.8.1/ext...pg.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...14.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro...or.jar

windows11-21h2-x64

v4.8.1/gro...vy.jar

windows11-21h2-x64

v4.8.1/ide...19.jar

windows11-21h2-x64

v4.8.1/ide...18.jar

windows11-21h2-x64

v4.8.1/ide....2.jar

windows11-21h2-x64

v4.8.1/mal...ud.jar

windows11-21h2-x64

v4.8.1/mal...pt.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...er.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...tz.jar

windows11-21h2-x64

v4.8.1/mal...es.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...re.jar

windows11-21h2-x64

v4.8.1/mal...to.jar

windows11-21h2-x64

v4.8.1/mal...ry.jar

windows11-21h2-x64

v4.8.1/mal...js.jar

windows11-21h2-x64

Resubmissions

05-11-2024 19:35

241105-ya6v9axapf 7

05-11-2024 19:29

241105-x7dqasxglr 7

Analysis

max time kernel
202s
max time network
279s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
05-11-2024 19:35

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

MaltegoSetup.v4.8.1.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

9 signatures

300 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/Splash.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

v4.8.1/bin/maltego

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral9

Sample

v4.8.1/bin/maltego.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

v4.8.1/extra/modules/bcpg.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

v4.8.1/extra/modules/org-netbeans-html-ko4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

v4.8.1/extra/modules/org-netbeans-html-xhr4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

v4.8.1/extra/modules/slf4j-jdk14.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

v4.8.1/groovy/modules/ext/groovy-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

v4.8.1/groovy/modules/ext/groovy-ant-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

v4.8.1/groovy/modules/org-netbeans-modules-groovy-editor.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

v4.8.1/groovy/modules/org-netbeans-modules-libs-groovy.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

v4.8.1/ide/modules/ext/commons-compress-1.19.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

v4.8.1/ide/modules/ext/jcodings-1.0.18.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

v4.8.1/ide/modules/ext/lucene-core-3.6.2.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-cloud.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-graalvm-javascript.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-recovery-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-entity-serializer.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-archive-mtz.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-certificates.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-chatapi.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-core.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-crypto.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-discovery.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

v4.8.1/maltego-core-platform/modules/ext/com.maltego.graalvm-javascript/org-graalvm-js/js.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

v4.8.1/groovy/modules/ext/groovy-ant-3.0.8.jar
Size

85KB
MD5

06d07e7277dfa15590e3590d79423a00
SHA1

3077166ed6635f777064ad79c8ca080ab8dc3247
SHA256

1b0889e67bef955120d8267346d30019ff767efd233ca5441ebbbc8e4a052933
SHA512

4a5cb7d08c573fbfc09494c1e7b8fece032c0f8f99bdf3795df7b374bf8a3140cd585f301f123a0d4260a1c5b19ca497f4a12e0e6544421e3a1718e3a5f4c2c5
SSDEEP

1536:QRrhpNxttH9IXAvgLuB175XXHXU6hZ83aRFfUkrJJ3YdwgO9gHU21ZbdRP2zV2iZ:Q1Nxt3IXA3TXRp7JVgxUwv2zV2rqJ

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\v4.8.1\groovy\modules\ext\groovy-ant-3.0.8.jar
1⤵
PID:4436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4436-2-0x0000023F1DF80000-0x0000023F1E1F0000-memory.dmp

Filesize
2.4MB

Download
memory/4436-11-0x0000023F1C680000-0x0000023F1C681000-memory.dmp

Filesize
4KB

Download
memory/4436-12-0x0000023F1DF80000-0x0000023F1E1F0000-memory.dmp

Filesize
2.4MB

Download