Analysis
-
max time kernel
149s -
max time network
51s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
05-02-2022 12:11
Static task
static1
Behavioral task
behavioral1
Sample
9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca.jar
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca.jar
Resource
win10v2004-en-20220113
General
-
Target
9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca.jar
-
Size
5KB
-
MD5
b082f98cb117c45d3f737254568a3be5
-
SHA1
b9a052802fd0aa183fc0cb3f0a7ac438da54f4fa
-
SHA256
9ff5f712e3f60b1722c1c1d93af310a8e33cf98e687c74797314425d096293ca
-
SHA512
b873a1d280c74f93b7b48fa2226686d4fdfba09f360ec4e3f00d45232a18ce15db57bc480cb960ba21ee532ecf14addfd4e2331d74588ad558265581f35a8d3a
Malware Config
Signatures
-
QNodeService
Trojan/stealer written in NodeJS and spread via Java downloader.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1656-53-0x000007FEFB571000-0x000007FEFB573000-memory.dmpFilesize
8KB
-
memory/1656-55-0x0000000002330000-0x0000000005330000-memory.dmpFilesize
48.0MB
-
memory/1656-56-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-57-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-58-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-59-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-60-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-61-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-62-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-63-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-64-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-65-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-66-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-67-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-68-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-69-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-70-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-71-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-72-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-74-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-73-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-76-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-78-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-77-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-75-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-79-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-80-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-81-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-82-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-83-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-84-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-85-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-86-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-87-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-88-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-89-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-92-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-91-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-90-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-93-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-94-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-95-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-97-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-96-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-98-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-99-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-100-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-101-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-102-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-103-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-104-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-105-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-106-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-107-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-108-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-109-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-110-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-111-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-112-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-113-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-114-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-115-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-116-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-117-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB
-
memory/1656-118-0x0000000000220000-0x0000000000231000-memory.dmpFilesize
68KB