Analysis

  • max time kernel
    150s
  • max time network
    10s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:36

General

  • Target

    order PC1746006-7032020-.jar

  • Size

    7KB

  • MD5

    4381d03e48381afd7ec6d234c49620c2

  • SHA1

    6f240482c06735abda55ede341f2b7f57c57c730

  • SHA256

    ed2f72b00751ae6769046bfca62ffcbf8d2fbc4d0bdcd3c40448d97a0da00a75

  • SHA512

    69b882118413481207ca9361d6c7460985ca3c6a4441549be44d8c2e99942a7335909ffdf417d76a3f8fcd7c36f4c94d0b85972666482fd46179e8a47d0705db

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\order PC1746006-7032020-.jar"
    1⤵
      PID:1084

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads