Overview

overview

10

Static

static

IMG-102278...19.jar

windows7_x64

1

IMG-102278...19.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IMG-10227821963777100026367819.jar

  • Size

    77KB

  • Sample

    201104-fd3ca25q2s

  • MD5

    c36face399b3f49c67873aea7185b3af

  • SHA1

    30cbb16d7b913d153cac91ae5c3e7eecb6b1d9e2

  • SHA256

    303c5311de9c5dd4bb49cac5d1efdb4c5cccf03c8bf058d8c87055568712467d

  • SHA512

    38ac7b5287ea23d54833095ac6975285e090ac10cbd4b13662f36764316c0bdd23d042026ffc0b885ea2a85ec272319f2de977ea9cb9c7adf20d4a54147a54be

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      IMG-10227821963777100026367819.jar

    • Size

      77KB

    • MD5

      c36face399b3f49c67873aea7185b3af

    • SHA1

      30cbb16d7b913d153cac91ae5c3e7eecb6b1d9e2

    • SHA256

      303c5311de9c5dd4bb49cac5d1efdb4c5cccf03c8bf058d8c87055568712467d

    • SHA512

      38ac7b5287ea23d54833095ac6975285e090ac10cbd4b13662f36764316c0bdd23d042026ffc0b885ea2a85ec272319f2de977ea9cb9c7adf20d4a54147a54be

    Score
    10/10
    qnodeservicetrojan

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks