Overview

overview

10

Static

static

DHL_OCT 20...90.jar

windows7_x64

1

DHL_OCT 20...90.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL_OCT 2020 at 9.M_9B773000000032195537290.jar

  • Size

    400KB

  • Sample

    201015-ctyvjzav26

  • MD5

    21d602df36cd7178f0dc9c48da5403e9

  • SHA1

    dc251722d97937ad325a430625464274fd1bb57b

  • SHA256

    3aab6806957de31da35823a6997b4aa7449602eff3a6ebe085da25bd7a06d8a3

  • SHA512

    da385bff2be4c1db8cb30171ad046ad1c0438295734c8da6fb9a59b15d87d4bda134aa1bf8157c6251156e7341523e8d1a1d5cffbbaf72d0fb7d0e12f29909ab

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      DHL_OCT 2020 at 9.M_9B773000000032195537290.jar

    • Size

      400KB

    • MD5

      21d602df36cd7178f0dc9c48da5403e9

    • SHA1

      dc251722d97937ad325a430625464274fd1bb57b

    • SHA256

      3aab6806957de31da35823a6997b4aa7449602eff3a6ebe085da25bd7a06d8a3

    • SHA512

      da385bff2be4c1db8cb30171ad046ad1c0438295734c8da6fb9a59b15d87d4bda134aa1bf8157c6251156e7341523e8d1a1d5cffbbaf72d0fb7d0e12f29909ab

    Score
    10/10
    trojanqnodeservice

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks