General

  • Target

    INVOICE#2006.jar

  • Size

    80KB

  • Sample

    201028-hgs6r4a88n

  • MD5

    ceb73af74d8f6bc1069203085381af03

  • SHA1

    409c6f3b4150e0d5631884fa35de0f43b8bc6ecb

  • SHA256

    e6b43893d49d522864469d81499e46121eadbe089baf0657c23b15b91c973180

  • SHA512

    a1ee48c4da064a43b3d3a9ae78ceb80dc1687b4b70d056a1d2021597db692d919f8e221f5dd40ae6ab2a23cd3ed9d0f5cd6331324e41688ada0f9dcbcd9f66f5

Score
10/10

Malware Config

Targets

    • Target

      INVOICE#2006.jar

    • Size

      80KB

    • MD5

      ceb73af74d8f6bc1069203085381af03

    • SHA1

      409c6f3b4150e0d5631884fa35de0f43b8bc6ecb

    • SHA256

      e6b43893d49d522864469d81499e46121eadbe089baf0657c23b15b91c973180

    • SHA512

      a1ee48c4da064a43b3d3a9ae78ceb80dc1687b4b70d056a1d2021597db692d919f8e221f5dd40ae6ab2a23cd3ed9d0f5cd6331324e41688ada0f9dcbcd9f66f5

    Score
    10/10
    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

    • Executes dropped EXE

    • JavaScript code in executable

MITRE ATT&CK Matrix

Tasks