Overview
overview
4Static
static
4Cofense_On...al.pdf
windows10-2004-x64
3Cofense_On...al.pdf
windows11-ltsc_2024-x64
3Cofense_On...22.pdf
windows10-2004-x64
3Cofense_On...22.pdf
windows11-ltsc_2024-x64
3Cofense_On...22.pdf
windows10-2004-x64
3Cofense_On...22.pdf
windows11-ltsc_2024-x64
3Global VPN...ta.key
macos-10.15-amd64
1Global VPN...ta.key
macos-10.15-amd64
1Cofense_On...ta.key
macos-10.15-amd64
1Cofense_On...ta.key
macos-10.15-amd64
1Cofense_On...ot.pdf
windows10-2004-x64
3Cofense_On...ot.pdf
windows11-ltsc_2024-x64
3Analysis
- max time kernel
102s - max time network
104s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/09/2026, 04:35
Behavioral task
behavioral1
Sample
Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Global VPN - Full Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral8
Sample
Global VPN - Split Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral9
Sample
Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral10
Sample
Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral11
Sample
Cofense_Onbording/self-guided-new-hire-setup - mot.pdf
Resource
win10v2004-20260911-en
General
- Target Global VPN - Split Tunnel v4/ta.key
- Size 657B
- Sample260930-e7vppssxaz
- SHA256 c6ae569b946e49b56225b3570dd7db582fa11d8c8e27d891e6d7d3433cf17c04
- MD5 aa0aad8a42129103d08d2bcf3ee82368
- SHA1 d5de9134677705bc650768b25e73412354aa0593
- SHA512 27a5a86f132d44c21063907e11996917aad38dae25539c7c95fc218feb3fd1b478cc01c41bbd8d81f6e9e07d1f4284af062964aa5730747f4207fce1a2488a04
- TLSH T16701FE079FD5CE07887CE71BE5260517CE1A056B22C85E07607281403C66585EB8EC34
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Global VPN - Split Tunnel v4/ta.key\""1⤵PID:462
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Global VPN - Split Tunnel v4/ta.key\""1⤵PID:462
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Global VPN - Split Tunnel v4/ta.key"1⤵PID:462
-
/bin/zsh/bin/zsh -c "/Users/run/Global VPN - Split Tunnel v4/ta.key"2⤵PID:465
-
-
/Users/run/Global/Users/run/Global VPN - Split Tunnel v4/ta.key2⤵PID:465
-