Overview

overview

10

Static

static

PROPERTY DESIGNS.jar

windows7_x64

1

PROPERTY DESIGNS.jar

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    PROPERTY DESIGNS.jar
  • Size 463KB
  • Sample201013-mrff78lts6
  • SHA256 e2af2abfd29faf04991e4106528a65260c8173c06b756c124399ee955bec08c1
  • MD5 SHA1 SHA512
Score
10/10
qnodeservicepersistencespywaretrojan

Malware Config

Targets

    • Target
      PROPERTY DESIGNS.jar
    • Size 463KB
    • SHA256 e2af2abfd29faf04991e4106528a65260c8173c06b756c124399ee955bec08c1
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanqnodeservicepersistencespyware

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Adds Run key to start application

      persistence

    • JavaScript code in executable

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks