Overview

overview

10

Static

static

Covid19 Jo...me.jar

windows7_x64

10

Covid19 Jo...me.jar

windows10_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Covid19 Job Scheme.jar

  • Size

    7KB

  • MD5

    d6d0d595bf3e6228c1220f43b2bb07a7

  • SHA1

    fd41b7f486930563c82bf3a6d9bf982f5ad0fe7b

  • SHA256

    278ccb1e80359c83e26e8a0c6ef78b9030dfe0a55b3acc5db8bdfdb21e8113a5

  • SHA512

    ade42c094b9ea23ff9cd3e4b988d837fa8baebba37727fc1c854ed9cd0918dc4634455945e3eb1e9b244fedadf7f7d683f80e31dc7cddef3d69685215560cbdf

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Covid19 Job Scheme.jar"
    1⤵
      PID:4040

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads