Analysis

  • max time kernel
    149s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    05-02-2022 12:11

General

  • Target

    9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca.jar

  • Size

    5KB

  • MD5

    b082f98cb117c45d3f737254568a3be5

  • SHA1

    b9a052802fd0aa183fc0cb3f0a7ac438da54f4fa

  • SHA256

    9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca

  • SHA512

    b873a1d280c74f93b7b48fa2226686d4fdfba09f360ec4e3f00d45232a18ce15db57bc480cb960ba21ee532ecf14addfd4e2331d74588ad558265581f35a8d3a

Score
10/10

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca.jar
    1⤵
      PID:1656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1656-53-0x000007FEFB571000-0x000007FEFB573000-memory.dmp
      Filesize

      8KB

    • memory/1656-55-0x0000000002330000-0x0000000005330000-memory.dmp
      Filesize

      48.0MB

    • memory/1656-56-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-57-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-58-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-59-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-60-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-61-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-62-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-63-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-64-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-65-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-66-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-67-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-68-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-69-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-70-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-71-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-72-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-74-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-73-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-76-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-78-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-77-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-75-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-79-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-80-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-81-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-82-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-83-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-84-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-85-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-86-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-87-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-88-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-89-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-92-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-91-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-90-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-93-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-94-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-95-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-97-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-96-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-98-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-99-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-100-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-101-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-102-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-103-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-104-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-105-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-106-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-107-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-108-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-109-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-110-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-111-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-112-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-113-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-114-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-115-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-116-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-117-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB

    • memory/1656-118-0x0000000000220000-0x0000000000231000-memory.dmp
      Filesize

      68KB