Overview

overview

10

Static

static

NewOrder01620202.jar

windows7_x64

1

NewOrder01620202.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NewOrder01620202.jar

  • Size

    261KB

  • Sample

    201016-kx21xn3g52

  • MD5

    f8b9911f31c3d8554ff1859299d016d3

  • SHA1

    43217fbd7359a334d901a67a39bf4b4d7d34ddfe

  • SHA256

    59564ac8d8fde645901bda68dd8589c797b55fde0992f032b7df3529a1456e61

  • SHA512

    46f2af9cbb99191adaa7fd2859e8dd3dc6ff44751d4d37486c1d227b72d320a112939b8b5fc61ad011303a9f4d6d55a4838b6d9e36b4f54f93a4ab0701c4b2f2

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      NewOrder01620202.jar

    • Size

      261KB

    • MD5

      f8b9911f31c3d8554ff1859299d016d3

    • SHA1

      43217fbd7359a334d901a67a39bf4b4d7d34ddfe

    • SHA256

      59564ac8d8fde645901bda68dd8589c797b55fde0992f032b7df3529a1456e61

    • SHA512

      46f2af9cbb99191adaa7fd2859e8dd3dc6ff44751d4d37486c1d227b72d320a112939b8b5fc61ad011303a9f4d6d55a4838b6d9e36b4f54f93a4ab0701c4b2f2

    Score
    10/10
    trojanqnodeservice

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks