Overview

overview

10

Static

static

3015016dbd...74.jar

windows7_x64

10

3015016dbd...74.jar

windows10_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3015016dbdc27d479285dd68f1032974.jar

  • Size

    5KB

  • MD5

    3015016dbdc27d479285dd68f1032974

  • SHA1

    088f7c9524ebb317e400aca8a03c02e96b524b46

  • SHA256

    0d925d18604b6d81c8584b1acc391e0e79de9e239eaecd97e2cb550fa3522875

  • SHA512

    33c486fa7caf231c50bda0cefcebf5deb5e56430be9907a8f08a57f55ce37a28a014f8f7053385b1bfe44b8c86ff4d27e11a78ca03132895136f95290045df55

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\3015016dbdc27d479285dd68f1032974.jar
    1⤵
      PID:1400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads