Analysis

  • max time kernel
    150s
  • max time network
    147s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:43

General

  • Target

    008366454663.jar

  • Size

    3KB

  • MD5

    57376c452ac07e0c750d678cdf9ffbb9

  • SHA1

    94f5e09503e3e1af12f10bb308f8020a1cae6de7

  • SHA256

    2a994fe19652bfb3b85ff6019eeaed2b21fed1b67aea5fcf4abd9533465e9952

  • SHA512

    fcc7cd1035e012e98e0e69c7d2d0488044dc3d460cc163e733ae1f244db9704710cb3cb0b069a8f5d9eaf31b45fbe598c319bdb44d1139e1c8a074d53aec8007

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\008366454663.jar
    1⤵
      PID:632

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads