qnodeservice | 20d80f734edc92212a92a707186e22a60577c93e8bf421841b43d308f492734b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Sample_5f73b570cb0f41001b620aad.bin
Size 126KB
Sample201014-mewsvglgws
SHA256 20d80f734edc92212a92a707186e22a60577c93e8bf421841b43d308f492734b
MD5 abca242f11e901d0f85538e2f55b8321
SHA1 9be7f118e5c9b01d6fefb08c4959422358bbec24
SHA512 42692373ea1237ba1d026700604ccdb755b2ad9ee17734e5ba8ab9c8c67f5643c207df939a9881319979e3c7437084583cb58c6f5c64ad67793e1051e8ff43e9
MD5 SHA1 SHA512

Score

10^/10

qnodeservice trojan

Malware Config

Targets

- Target
  Sample_5f73b570cb0f41001b620aad.bin
- Size 126KB
- SHA256 20d80f734edc92212a92a707186e22a60577c93e8bf421841b43d308f492734b
- MD5 abca242f11e901d0f85538e2f55b8321
- SHA1 9be7f118e5c9b01d6fefb08c4959422358bbec24
- SHA512 42692373ea1237ba1d026700604ccdb755b2ad9ee17734e5ba8ab9c8c67f5643c207df939a9881319979e3c7437084583cb58c6f5c64ad67793e1051e8ff43e9
- MD5 SHA1 SHA512
Score

10^/10

trojan qnodeservice
- QNodeService
  Trojan/stealer written in NodeJS and spread via Java downloader.
  trojan qnodeservice
- Executes dropped EXE
- JavaScript code in executable
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

trojanqnodeservice