7b4619c6841b07dd3045fcf718307040c466e2a3460c102bbef0141a7e0c1164

Submit
Reports

Overview

overview

Static

static

MaltegoSet....1.exe

windows11-21h2-x64

$PLUGINSDI...sh.dll

windows11-21h2-x64

$PLUGINSDI...nu.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...gs.dll

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

v4.8.1/bin/maltego

windows11-21h2-x64

v4.8.1/bin...go.exe

windows11-21h2-x64

v4.8.1/ext...pg.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...4j.jar

windows11-21h2-x64

v4.8.1/ext...14.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro....8.jar

windows11-21h2-x64

v4.8.1/gro...or.jar

windows11-21h2-x64

v4.8.1/gro...vy.jar

windows11-21h2-x64

v4.8.1/ide...19.jar

windows11-21h2-x64

v4.8.1/ide...18.jar

windows11-21h2-x64

v4.8.1/ide....2.jar

windows11-21h2-x64

v4.8.1/mal...ud.jar

windows11-21h2-x64

v4.8.1/mal...pt.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...er.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...tz.jar

windows11-21h2-x64

v4.8.1/mal...es.jar

windows11-21h2-x64

v4.8.1/mal...pi.jar

windows11-21h2-x64

v4.8.1/mal...re.jar

windows11-21h2-x64

v4.8.1/mal...to.jar

windows11-21h2-x64

v4.8.1/mal...ry.jar

windows11-21h2-x64

v4.8.1/mal...js.jar

windows11-21h2-x64

Resubmissions

05-11-2024 19:35

241105-ya6v9axapf 7

05-11-2024 19:29

241105-x7dqasxglr 7

Analysis

max time kernel
84s
max time network
202s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
05-11-2024 19:35

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

MaltegoSetup.v4.8.1.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

9 signatures

300 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/Splash.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

v4.8.1/bin/maltego

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral9

Sample

v4.8.1/bin/maltego.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

v4.8.1/extra/modules/bcpg.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

v4.8.1/extra/modules/org-netbeans-html-ko4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

v4.8.1/extra/modules/org-netbeans-html-xhr4j.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

v4.8.1/extra/modules/slf4j-jdk14.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

v4.8.1/groovy/modules/ext/groovy-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

v4.8.1/groovy/modules/ext/groovy-ant-3.0.8.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

v4.8.1/groovy/modules/org-netbeans-modules-groovy-editor.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

v4.8.1/groovy/modules/org-netbeans-modules-libs-groovy.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

v4.8.1/ide/modules/ext/commons-compress-1.19.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

v4.8.1/ide/modules/ext/jcodings-1.0.18.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

v4.8.1/ide/modules/ext/lucene-core-3.6.2.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-cloud.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-graalvm-javascript.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

v4.8.1/maltego-core-platform/modules/com-maltego-recovery-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-entity-serializer.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-api.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-archive-mtz.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-certificates.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-chatapi.jar

Resource

win11-20241023-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-core.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-crypto.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-discovery.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

v4.8.1/maltego-core-platform/modules/ext/com.maltego.graalvm-javascript/org-graalvm-js/js.jar

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

v4.8.1/maltego-core-platform/modules/com-paterva-maltego-crypto.jar
Size

15KB
MD5

ba20ae35af3c8c24525954f72af102e2
SHA1

9c4a6e3b23186cb458a6d053d49178a2b0a921fa
SHA256

4cceddf6271b546a0c0fe786d63c77fe23b886473f8e7d044e05bcca5029c380
SHA512

3691ef6776842d9d60c72df418fe331d2347a375b247803913bf6c33009d385e4f4fde9858340fa0fd1bbaa9603b5bf8aa4d0c4a29fcb8a9d74435eb79362f9f
SSDEEP

192:VTRKMkxMxEsYHPYgL/3mSmbBAKXSiHEpwPRC/muPODK+PmIkM8QQJR5myRlgCnZ7:VTAMkGxfAPYs3R0GKwK57e4r84b5Tf9k

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\v4.8.1\maltego-core-platform\modules\com-paterva-maltego-crypto.jar
1⤵
PID:5532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5532-2-0x0000023103730000-0x00000231039A0000-memory.dmp

Filesize
2.4MB

Download
memory/5532-11-0x0000023101D50000-0x0000023101D51000-memory.dmp

Filesize
4KB

Download
memory/5532-12-0x0000023103730000-0x00000231039A0000-memory.dmp

Filesize
2.4MB

Download