virus logo Virus

Java/CVE202144228.NVE!tr.dldr

description-logoAnalysis


Java/CVE202144228.NVE!tr.dldr is a detection that has been associated with log4j vulnerability.
This malware has been associated with the following article/advisory.
CVE-2021-44228
Apache Log4J Remote Code Execution Vulnerability (CVE-2021-44228)

  • Following are some of the near/exact IOCs/file hash associated with this detection:
    • Md5: f6e51ea341570c6e9e4c97aee082822b
      Sha256: eb76b7fb22dd442ba7d5064dce4cec79e6db745ace7019b6dfe5642782bf8660
    • Md5: 95d9a068529dd2ea4bb4bef644f5c4f5
      Sha256: 4d040caffa28e6a0fdc0d274547cf1c7983996fc33e51b0b2c511544f030d71b

    • recommended-action-logoRecommended Action

    • Make sure that your FortiGate/FortiClient system is using the latest AV database.
    • Quarantine/delete files that are detected and replace infected files with clean backup copies.

    Telemetry logoTelemetry

    Detection Availability

    FortiGate
    FortiClient
    FortiAPS
    FortiAPU
    FortiMail
    FortiSandbox
    FortiWeb
    Web Application Firewall
    FortiIsolator
    FortiDeceptor
    FortiEDR

    Version Updates

    Date Version Detail
    2021-12-20 89.07941
    ID 10073042
    Released Dec 20, 2021
    Description
    Updated    		 Dec 20, 2021
    Aliases log4j,tsunami,CVE-2021-44228,Mirai
    Profile Type Trojan Downloader (tr.dldr)