Analysis

  • max time kernel
    150s
  • max time network
    11s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:43

General

  • Target

    INVOICE.jar

  • Size

    3KB

  • MD5

    079c31d25adebaf618d930f3af91877d

  • SHA1

    a106be305d1ae2e5ab09b11a87dd718713321b68

  • SHA256

    e130c52fd71ca568478abc1c8b6f03eb73101c4bbcbe0bf1f5d2c88e2f8e6d08

  • SHA512

    b5ff8e920d2011bbf6cc3a5efe8f30bb40ef8863a33353c41e7dd5b1ed77576e131ac06f28826cf846d30d246b5fe9920465b91090048aa0cde16acd64d53901

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\INVOICE.jar
    1⤵
      PID:1096

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads