Analysis

  • max time kernel
    150s
  • max time network
    141s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:47

General

  • Target

    CC Reservation.jar

  • Size

    5KB

  • MD5

    539a18f0ec553107cb28a12b55046f57

  • SHA1

    5e719bee533042ef8050a5dcd1e6050efb47f6d5

  • SHA256

    1b5e8744ccd112078a18fe342590331b369d2f529180ce56833a645040cebfdb

  • SHA512

    069338d1da04ebccea6afa8745b0fa5ba97fbf5e73d53c16d81da9406510ec6d93e0b14645998ea85b31104db042c999cf51ae1f3c43d9e2f9f9eda86be4da96

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\CC Reservation.jar"
    1⤵
      PID:640

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads