Analysis

  • max time kernel
    150s
  • max time network
    13s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:55

General

  • Target

    Swift Copy.jar

  • Size

    5KB

  • MD5

    d7530a9ac1699224636af46026d7c413

  • SHA1

    ba3459769e1e55b76e9880a9d3ae57cf3c4064b9

  • SHA256

    19ebc16698c7e5b8300ddc4ec09e9a7f09a3a4f3d507e13065dff0ab7085861d

  • SHA512

    ad294cfd54b89043f56f1bee12a7635458b72504db5034a6509316cbbc20d12f66a851bf62c5979ee8b03bb6d338c3851b06e721e613694a37467b97246eba69

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Swift Copy.jar"
    1⤵
      PID:1644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads