Benign Download

00/16/001621a3c5025928ab2403667d866b773d9d8141f5ef5bc1865a53d6f01260b1

Hidden path prefix in /tmpComposite catalog requires rule references
SHA-256001621a3c5025928ab2403667d866b773d9d8141f5ef5bc1865a53d6f01260b1
MaleculeH(F)Md

Evidence

Top-level traits or composite_rules key lines 1–48
1defaults:
2 platforms: [qnx, unix]
3 for: [java, class, java_class]
4 attack: T1037.004
5
6traits:
7 - id: qnx-java-profiled-script
8 desc: QNX Java profile.d script
9 crit: suspicious
10 conf: 0.94
11 if:
⋯7 lines
19 if:
20 type: text
21 substr: /bin/java -cp /tmp/.java-security.jar
22
23 - id: qnx-java-loginmodule-command
⋯25 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.