Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:38

General

  • Target

    01ca1fa25424817dad53323413185459.jar

  • Size

    7KB

  • MD5

    01ca1fa25424817dad53323413185459

  • SHA1

    3b7422545d9b8061a840278f04cf1626f6181a6d

  • SHA256

    a776196dd07324fa317fb8bbeabb70242b3ab4e8ace9ba62eddb9d41a60449e6

  • SHA512

    f72ff9f7e5f5fbe120c75fb61af7f6c855956f05365875370943967e9a792314e388f7dc22227e1e6c29089e3c74aaf4460b3f2c2163f5cd1998791fe91a74da

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\01ca1fa25424817dad53323413185459.jar
    1⤵
      PID:3988

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads