Overview

overview

10

Static

static

invoice_pdf.jar

windows7_x64

10

invoice_pdf.jar

windows10_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    14s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    invoice_pdf.jar

  • Size

    5KB

  • MD5

    37f5e9c66a090ac8ca354ad4574108ac

  • SHA1

    84f29ff28d4d1f04b1a05c920718356588d49404

  • SHA256

    18382afed4a3eb374fa6a2d5a564d881204f631279903a445fe2d19c8f1da897

  • SHA512

    eb4faaaf782021cf70279e787642588bbf3bbe18d239b54558bbababa0b89eb8dce4b6cf96db9b6c1f7e347ed28bad189ccf51120f3f3335f6df8d9391da60b4

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\invoice_pdf.jar
    1⤵
      PID:1756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads