Overview

overview

10

Static

static

INVOICE#0108.jar

windows7_x64

1

INVOICE#0108.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    INVOICE#0108.jar

  • Size

    68KB

  • Sample

    201021-47fezz3fhs

  • MD5

    eeb9a3c4cc1fd0e95ff4184a50eb49d9

  • SHA1

    8445135ef24533a22270fd15d9a9e767c43168e6

  • SHA256

    6b9c4f7252046dbdc98d8eb537bdc776b1e35040b86c1dc1927c2e6bdd7e6c0d

  • SHA512

    8533d4d2ef1fbcf7df5c452f613606df19a6271a54c4114809c3dfb21a0900e9d58474ba39da63b4bbd7aec4ed15279b81a3fcf538560e8e6bcc92781866ebcd

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      INVOICE#0108.jar

    • Size

      68KB

    • MD5

      eeb9a3c4cc1fd0e95ff4184a50eb49d9

    • SHA1

      8445135ef24533a22270fd15d9a9e767c43168e6

    • SHA256

      6b9c4f7252046dbdc98d8eb537bdc776b1e35040b86c1dc1927c2e6bdd7e6c0d

    • SHA512

      8533d4d2ef1fbcf7df5c452f613606df19a6271a54c4114809c3dfb21a0900e9d58474ba39da63b4bbd7aec4ed15279b81a3fcf538560e8e6bcc92781866ebcd

    Score
    10/10
    trojanqnodeservice

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks