Analysis

  • max time kernel
    150s
  • max time network
    11s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:53

General

  • Target

    3015016dbdc27d479285dd68f1032974.jar

  • Size

    5KB

  • MD5

    3015016dbdc27d479285dd68f1032974

  • SHA1

    088f7c9524ebb317e400aca8a03c02e96b524b46

  • SHA256

    0d925d18604b6d81c8584b1acc391e0e79de9e239eaecd97e2cb550fa3522875

  • SHA512

    33c486fa7caf231c50bda0cefcebf5deb5e56430be9907a8f08a57f55ce37a28a014f8f7053385b1bfe44b8c86ff4d27e11a78ca03132895136f95290045df55

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\3015016dbdc27d479285dd68f1032974.jar
    1⤵
      PID:1912

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads