Overview

overview

10

Static

static

fbee6ba15c...21.jar

windows7_x64

10

fbee6ba15c...21.jar

windows10-2004_x64

1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    05-02-2022 07:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fbee6ba15c3a034b99b5e92524c7dfb1ee2aad1a0ce4a4f9df87eeb85f9d3e21.jar

  • Size

    5KB

  • MD5

    2290ca0172c7e5d2f4fa99ab4546c569

  • SHA1

    87a97ef2c7c8b202146b370be396b0f09412ec9f

  • SHA256

    fbee6ba15c3a034b99b5e92524c7dfb1ee2aad1a0ce4a4f9df87eeb85f9d3e21

  • SHA512

    4b88d19f62b6a8fdc3857b79eb78531d762f98a619ec41426fcb4ee455e5425ad21898f3b2d07c3289168acdd9643c1dd8f5858db4bf7b341f8b7c519ecf52d6

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\fbee6ba15c3a034b99b5e92524c7dfb1ee2aad1a0ce4a4f9df87eeb85f9d3e21.jar
    1⤵
      PID:1208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1208-54-0x000007FEFC061000-0x000007FEFC063000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1208-56-0x0000000002030000-0x0000000005030000-memory.dmp

      Filesize

      48.0MB

      Download