Overview

overview

10

Static

static

Invoice 14...ED.jar

windows7_x64

10

Invoice 14...ED.jar

windows10_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Invoice 14455 from FIN-BOROUGHS LIMITED.jar

  • Size

    3KB

  • MD5

    4ddbbdfa30604e99f81d93fbd610851c

  • SHA1

    7814c7bba27f3ed68a011bf84cac5b87341ee32b

  • SHA256

    fd59edb46b67479c4e32e47f68ec89c8a936ff9674bb1ea77c284d310ba71b8c

  • SHA512

    722ab2aa1d3a8d4fff24c935eef06de4ba77edcdf25f7e79e9e7f9489549894e0f6cf1058c68c65aea0e9287554d05938bed2cf3252ccbffb391a8d6f754b6ab

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Invoice 14455 from FIN-BOROUGHS LIMITED.jar"
    1⤵
      PID:500

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads