Overview

overview

10

Static

static

invoice 837001.jar

windows7_x64

10

invoice 837001.jar

windows10-2004_x64

4

Analysis

  • max time kernel
    150s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    05-02-2022 18:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    invoice 837001.jar

  • Size

    5KB

  • MD5

    2290ca0172c7e5d2f4fa99ab4546c569

  • SHA1

    87a97ef2c7c8b202146b370be396b0f09412ec9f

  • SHA256

    fbee6ba15c3a034b99b5e92524c7dfb1ee2aad1a0ce4a4f9df87eeb85f9d3e21

  • SHA512

    4b88d19f62b6a8fdc3857b79eb78531d762f98a619ec41426fcb4ee455e5425ad21898f3b2d07c3289168acdd9643c1dd8f5858db4bf7b341f8b7c519ecf52d6

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\Windows\system32\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\invoice 837001.jar"
    1⤵
      PID:2028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2028-53-0x000007FEFC081000-0x000007FEFC083000-memory.dmp
      Filesize

      8KB

      Download
    • memory/2028-57-0x0000000002230000-0x0000000005230000-memory.dmp
      Filesize

      48.0MB

      Download
    • memory/2028-59-0x0000000000120000-0x0000000000121000-memory.dmp
      Filesize

      4KB

      Download
    • memory/2028-61-0x0000000000120000-0x0000000000121000-memory.dmp
      Filesize

      4KB

      Download
    • memory/2028-62-0x0000000000120000-0x0000000000121000-memory.dmp
      Filesize

      4KB

      Download
    • memory/2028-68-0x0000000000120000-0x0000000000121000-memory.dmp
      Filesize

      4KB

      Download
    • memory/2028-71-0x0000000000120000-0x0000000000121000-memory.dmp
      Filesize

      4KB

      Download