Analysis

  • max time kernel
    149s
  • max time network
    12s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:48

General

  • Target

    Unlimited attachment.txt.jar

  • Size

    5KB

  • MD5

    306bf45a3c4e8caba419326d9aab07d7

  • SHA1

    315ed811ca128ab22b14a9e901b19f5153fcf908

  • SHA256

    8ce1bea97d53a08287ab5718ded407a1a4e645444f9e239e8dabd7ecd35df570

  • SHA512

    c8f510b751ad16a7e01dda95c5c9319b44921a78d8df073c83f760886683b06f885442392c8d9740b7d7cddd3fd3ad3e3544cb5ba8ad3b271019064167790517

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Unlimited attachment.txt.jar"
    1⤵
      PID:2036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads