Overview

overview

10

Static

static

PO order P...NC.jar

windows7_x64

10

PO order P...NC.jar

windows10_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    145s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    PO order PC1746006-70320-ACBEL POLYTECH INC.jar

  • Size

    7KB

  • MD5

    f234599ea7714f207e100c76a26d200e

  • SHA1

    1fd06b8478242ce8aa7c7ffd4ac1376f2c7ea254

  • SHA256

    134c79882b45322d65fa8a7c4af1abe3cfbdadb0e129fc6c75f436399cf78b78

  • SHA512

    0767305e3149d2961c666a9932fb6fbf580802943487442e617cccab0a0f1e07bd816c2d6d5fd7507b597d2fdc244547833d34726b3171d5cc797810af554eca

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\PO order PC1746006-70320-ACBEL POLYTECH INC.jar"
    1⤵
      PID:4760

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads