Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    09-11-2020 19:36

General

  • Target

    Facture.pdf.jar

  • Size

    7KB

  • MD5

    56b5b04fcff24c31bf7a8fe1c80a7f7e

  • SHA1

    37fbbb37897f2d1611ce742ace8f3adc576a308b

  • SHA256

    42b085bcee7a82201c4c4e1dd56949ace5a8eeae1aaf0f0131d4a830bb623bba

  • SHA512

    9360fdca34b42d248a990fcf6f33098772c9dd1982eb5bdb01b2ab6617868f13d5934afd87a976fd2a48aee5b62e86dfb00c5662a4ec5482d68ae425b0444611

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Facture.pdf.jar
    1⤵
      PID:1056

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads