Overview

overview

10

Static

static

DHL_109401...00.jar

windows7_x64

1

DHL_109401...00.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL_109401211_09100903_12012900.jar

  • Size

    67KB

  • Sample

    201019-1at7mhlwtj

  • MD5

    0216dcdef87aab9e27fb70c0ef09cd7c

  • SHA1

    f3117a7557d547b1ce33c20d185b3297cb8c427a

  • SHA256

    c4d2576de9891cf1eff0950309a2617a11510a2e877a5957a1ad087693366daa

  • SHA512

    8e923d9c980abee1ba1526f7cb03fe635a7b179a71081af9099ce0b9ced3c63792398a34bc9e0cb7d99d7b699e325d3768cb158f6530c1edeec1b2554df4e612

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      DHL_109401211_09100903_12012900.jar

    • Size

      67KB

    • MD5

      0216dcdef87aab9e27fb70c0ef09cd7c

    • SHA1

      f3117a7557d547b1ce33c20d185b3297cb8c427a

    • SHA256

      c4d2576de9891cf1eff0950309a2617a11510a2e877a5957a1ad087693366daa

    • SHA512

      8e923d9c980abee1ba1526f7cb03fe635a7b179a71081af9099ce0b9ced3c63792398a34bc9e0cb7d99d7b699e325d3768cb158f6530c1edeec1b2554df4e612

    Score
    10/10
    trojanqnodeservice

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks