Overview

overview

10

Static

static

DHL Parcel.jar

windows7_x64

1

DHL Parcel.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL Parcel.jar

  • Size

    78KB

  • Sample

    201019-ebrn1pjsv6

  • MD5

    921dee3f81d4f053499484de0f20d142

  • SHA1

    e92d731f7885ec302f5efadd06cc7bc37f7fa81f

  • SHA256

    e065c2db9a299198bb85800ae462703a54f7e63257c790ccdf32ea92da097365

  • SHA512

    870417155054edf8fd2f985bac233b748210dfb818c0ad25ba2cd68b7e27c583d19cbab457608cf8af0e8b9fe75f5d5067138bd151e30ce42e57e668b1de22e4

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      DHL Parcel.jar

    • Size

      78KB

    • MD5

      921dee3f81d4f053499484de0f20d142

    • SHA1

      e92d731f7885ec302f5efadd06cc7bc37f7fa81f

    • SHA256

      e065c2db9a299198bb85800ae462703a54f7e63257c790ccdf32ea92da097365

    • SHA512

      870417155054edf8fd2f985bac233b748210dfb818c0ad25ba2cd68b7e27c583d19cbab457608cf8af0e8b9fe75f5d5067138bd151e30ce42e57e668b1de22e4

    Score
    10/10
    trojanqnodeservice

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks