Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:52

General

  • Target

    8cff793c3828cd6f2f1c397850f5d812.jar

  • Size

    3KB

  • MD5

    8cff793c3828cd6f2f1c397850f5d812

  • SHA1

    8de9974f45c86f55e74f1be9dce173f131bee076

  • SHA256

    a103d19d41bac4a5f7fc3e8d4d4a56a6fd6a5a92c21d4b403e06b7003c8655b0

  • SHA512

    2ec0d3ddd854fadd5579b529d8b952188ccdf11fa4672c9557ba019b17d270d3f1da794e592ffa457538e151fcbb161c249e4eda0af65eac5e2fcd3f89e6d759

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\8cff793c3828cd6f2f1c397850f5d812.jar
    1⤵
      PID:1192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads