Overview

overview

10

Static

static

8885ccb414...b2.jar

windows7_x64

10

8885ccb414...b2.jar

windows10-2004_x64

1

Analysis

  • max time kernel
    159s
  • max time network
    97s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    21-05-2022 11:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8885ccb4147b4ff3a07d4b82906e17c24ea16bd301609926a768dd3091b5e9b2.jar

  • Size

    5KB

  • MD5

    2fc741ae466fb881e4ed4b5ec88f07c6

  • SHA1

    4b5ee428a5bf100df38f7c960c5a118fd7e5c64c

  • SHA256

    8885ccb4147b4ff3a07d4b82906e17c24ea16bd301609926a768dd3091b5e9b2

  • SHA512

    f1670ab07f7098322e3a06a0f2e764d8362cf2e3708053aaaebc145e966edb8b72147a1716887355faea7e699d640d36507603bd51a9ca0d74a92e26751348fd

Score
10/10
qnodeservicetrojan

Malware Config

Signatures

  • QNodeService

    Trojan/stealer written in NodeJS and spread via Java downloader.

    trojanqnodeservice

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\8885ccb4147b4ff3a07d4b82906e17c24ea16bd301609926a768dd3091b5e9b2.jar
    1⤵
      PID:336

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/336-54-0x000007FEFB9C1000-0x000007FEFB9C3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/336-64-0x00000000020C0000-0x00000000050C0000-memory.dmp
      Filesize

      48.0MB

      Download