Overview

overview

10

Static

static

Facture.pdf.jar

windows7_x64

10

Facture.pdf.jar

windows10-2004_x64

1

Analysis

  • max time kernel
    153s
  • max time network
    60s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    21-05-2022 01:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Facture.pdf.jar

  • Size

    7KB

  • MD5

    56b5b04fcff24c31bf7a8fe1c80a7f7e

  • SHA1

    37fbbb37897f2d1611ce742ace8f3adc576a308b

  • SHA256

    42b085bcee7a82201c4c4e1dd56949ace5a8eeae1aaf0f0131d4a830bb623bba

  • SHA512

    9360fdca34b42d248a990fcf6f33098772c9dd1982eb5bdb01b2ab6617868f13d5934afd87a976fd2a48aee5b62e86dfb00c5662a4ec5482d68ae425b0444611

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Facture.pdf.jar
    1⤵
      PID:1524

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1524-54-0x000007FEFBC91000-0x000007FEFBC93000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1524-57-0x0000000002120000-0x0000000005120000-memory.dmp

      Filesize

      48.0MB

      Download