Purchase Order_ 172833_O_393.jar

General
Target

Purchase Order_ 172833_O_393.jar

Filesize

5KB

Completed

10-11-2020 02:51

Score
10/10
MD5

bfa124521374ebcc77807c2531b1260a

SHA1

43a7bcffc95ee3834ef4ab3e2fc9189972671fd9

SHA256

202080e727b4d21764023115b9f2c5e0b60656bcc57362daa80933754466620b

Malware Config
Signatures 1

Filter: none

  • QNodeService

    Description

    Trojan/stealer written in NodeJS and spread via Java downloader.

    Tags

Processes 1
  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Purchase Order_ 172833_O_393.jar"
    PID:3636
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads