Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    09-11-2020 19:43

General

  • Target

    Checkliste bestellen.jar

  • Size

    3KB

  • MD5

    f9beef0138b714d4ebd7039c2d7039b4

  • SHA1

    92280432ccbc2ceda31cbe640e7647ad52f77801

  • SHA256

    587b85aa55e9c618602ac9322b2ec5aa00742e9672b615f21a938e7a787de952

  • SHA512

    494021d960a29a125c24cc8ec9c79e420cb5a7d698e6390c7af4dc88d49c6f5ca2fd944a45709e4bebf6954a91726c3c893bce22b125b31ea8fd6f863337299b

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Checkliste bestellen.jar"
    1⤵
      PID:1100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads