7b4619c6841b07dd3045fcf718307040c466e2a3460c102bbef0141a7e0c1164

Submit
Reports

Overview

overview

Static

static

MaltegoSet....1.exe

windows11-21h2-x64

$PLUGINSDI...sh.dll

windows11-21h2-x64

$PLUGINSDI...nu.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...gs.dll

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

v4.8.1/bin/maltego

windows11-21h2-x64

v4.8.1/bin...go.exe

windows11-21h2-x64

v4.8.1/ext...pg.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...14.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro...or.jar

windows11-21h2-x64

v4.8.1/gro...vy.jar

windows11-21h2-x64

v4.8.1/ide...19.jar

windows11-21h2-x64

v4.8.1/ide...18.jar

windows11-21h2-x64

v4.8.1/ide....2.jar

windows11-21h2-x64

v4.8.1/mal...ud.jar

windows11-21h2-x64

v4.8.1/mal...pt.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...er.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...tz.jar

windows11-21h2-x64

v4.8.1/mal...es.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...re.jar

windows11-21h2-x64

v4.8.1/mal...to.jar

windows11-21h2-x64

v4.8.1/mal...ry.jar

windows11-21h2-x64

v4.8.1/mal...js.jar

windows11-21h2-x64

Resubmissions

05-11-2024 19:35

241105-ya6v9axapf 7

05-11-2024 19:29

241105-x7dqasxglr 7

Analysis

max time kernel
205s
max time network
277s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
05-11-2024 19:35

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

MaltegoSetup.v4.8.1.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

9 signatures

300 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/Splash.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

v4.8.1/bin/maltego

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral9

Sample

v4.8.1/bin/maltego.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

v4.8.1/extra/modules/bcpg.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

v4.8.1/extra/modules/org-netbeans-html-ko4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

v4.8.1/extra/modules/org-netbeans-html-xhr4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

v4.8.1/extra/modules/slf4j-jdk14.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

v4.8.1/groovy/modules/ext/groovy-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

v4.8.1/groovy/modules/ext/groovy-ant-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

v4.8.1/groovy/modules/org-netbeans-modules-groovy-editor.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

v4.8.1/groovy/modules/org-netbeans-modules-libs-groovy.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

v4.8.1/ide/modules/ext/commons-compress-1.19.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

v4.8.1/ide/modules/ext/jcodings-1.0.18.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

v4.8.1/ide/modules/ext/lucene-core-3.6.2.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-cloud.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-graalvm-javascript.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-recovery-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-entity-serializer.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-archive-mtz.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-certificates.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-chatapi.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-core.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-crypto.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-discovery.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

v4.8.1/maltego-core-platform/modules/ext/com.maltego.graalvm-javascript/org-graalvm-js/js.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-core.jar
Size

36KB
MD5

6b22912621c06e759375fae583fdd6ae
SHA1

5aa20ada8ef8b05e78e9f82d8173ce8530211418
SHA256

0b78b57aa7dbd79f332e4b5fb2e2a8b58cd5ffb0d177a0e629cdbda9ab3f704c
SHA512

f3dfd7b3e9ef1b5df54c6373f2b7389699e837bc2a710e7ddf6e9f492e493ad5fc81686333a2f80a1c6d2a32c43b7c2c6080b513b4c028cedfd6a9ced99ed76e
SSDEEP

768:FNX4ne0pAvazQVZG2uoGvp2CW0SP7VVAI8CVi+h0Kl/X5HAcTP:F54JpG6AZG2RGvpvWZV6I8siBg57

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\v4.8.1\maltego-core-platform\modules\com-paterva-maltego-core.jar
1⤵
PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2888-2-0x000001D1C6DA0000-0x000001D1C7010000-memory.dmp

Filesize
2.4MB

Download
memory/2888-11-0x000001D1C54F0000-0x000001D1C54F1000-memory.dmp

Filesize
4KB

Download
memory/2888-12-0x000001D1C6DA0000-0x000001D1C7010000-memory.dmp

Filesize
2.4MB

Download