7b4619c6841b07dd3045fcf718307040c466e2a3460c102bbef0141a7e0c1164

Submit
Reports

Overview

overview

Static

static

MaltegoSet....1.exe

windows11-21h2-x64

$PLUGINSDI...sh.dll

windows11-21h2-x64

$PLUGINSDI...nu.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...gs.dll

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

v4.8.1/bin/maltego

windows11-21h2-x64

v4.8.1/bin...go.exe

windows11-21h2-x64

v4.8.1/ext...pg.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...14.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro...or.jar

windows11-21h2-x64

v4.8.1/gro...vy.jar

windows11-21h2-x64

v4.8.1/ide...19.jar

windows11-21h2-x64

v4.8.1/ide...18.jar

windows11-21h2-x64

v4.8.1/ide....2.jar

windows11-21h2-x64

v4.8.1/mal...ud.jar

windows11-21h2-x64

v4.8.1/mal...pt.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...er.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...tz.jar

windows11-21h2-x64

v4.8.1/mal...es.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...re.jar

windows11-21h2-x64

v4.8.1/mal...to.jar

windows11-21h2-x64

v4.8.1/mal...ry.jar

windows11-21h2-x64

v4.8.1/mal...js.jar

windows11-21h2-x64

Resubmissions

05-11-2024 19:35

241105-ya6v9axapf 7

05-11-2024 19:29

241105-x7dqasxglr 7

Analysis

max time kernel
83s
max time network
205s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
05-11-2024 19:35

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

MaltegoSetup.v4.8.1.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

9 signatures

300 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/Splash.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

v4.8.1/bin/maltego

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral9

Sample

v4.8.1/bin/maltego.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

v4.8.1/extra/modules/bcpg.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

v4.8.1/extra/modules/org-netbeans-html-ko4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

v4.8.1/extra/modules/org-netbeans-html-xhr4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

v4.8.1/extra/modules/slf4j-jdk14.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

v4.8.1/groovy/modules/ext/groovy-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

v4.8.1/groovy/modules/ext/groovy-ant-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

v4.8.1/groovy/modules/org-netbeans-modules-groovy-editor.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

v4.8.1/groovy/modules/org-netbeans-modules-libs-groovy.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

v4.8.1/ide/modules/ext/commons-compress-1.19.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

v4.8.1/ide/modules/ext/jcodings-1.0.18.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

v4.8.1/ide/modules/ext/lucene-core-3.6.2.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-cloud.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-graalvm-javascript.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-recovery-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-entity-serializer.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-archive-mtz.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-certificates.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-chatapi.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-core.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-crypto.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-discovery.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

v4.8.1/maltego-core-platform/modules/ext/com.maltego.graalvm-javascript/org-graalvm-js/js.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

v4.8.1/maltego-core-platform/modules/com-paterva-entity-serializer.jar
Size

8KB
MD5

6d3ec405ed75d90d08afb8a3efa9d61f
SHA1

695db8bc556eb4f8e17e80569e926a64a6dfebdd
SHA256

fbd4eca2b20eb311c23613486be0a9057b9b03d2b4941bff54a55242ea1eedb3
SHA512

8f09db781b4011a97be8176504fe76061916617c63a6d13a84d043c6dfffdbf484010c022e37f8a4afd327d405aaf3bc152d17c612c5f9ff66fadeb1558a01cb
SSDEEP

96:9ewzp7QkpMNhdRQ7K+OrfzlowlNv58saQOGD/YE2J65aq74/YVOcuH6vNV8J/00d:9ekQy78rfzlBvOG/1wKn7dFV8FhxfJn

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\v4.8.1\maltego-core-platform\modules\com-paterva-entity-serializer.jar
1⤵
PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-2-0x00000170A3E60000-0x00000170A40D0000-memory.dmp

Filesize
2.4MB

Download
memory/2084-11-0x00000170A3E40000-0x00000170A3E41000-memory.dmp

Filesize
4KB

Download
memory/2084-12-0x00000170A3E60000-0x00000170A40D0000-memory.dmp

Filesize
2.4MB

Download