Description
Trojan/stealer written in NodeJS and spread via Java downloader.
PO Quotation.jar
General
Target
Size
Sample
PO Quotation.jar
89KB
201119-2m6c565kae
Score
10 /10
MD5
SHA1
SHA256
SHA512
1cc049bd0c76d165ac6f78afd0474c6f
38503f829afd9f9e17d2f72fda89adab6e598129
c79a8f611b934f2630d4b6fb91240048cc85ecb354f75e01d6a2c444e8c12eed
60753e595658dda0d91cb358c2fe3b84137ce11e0d814fbd1a99cd32d7d0ae06a04ea37a228b1665de73d4bed43e88b7a36961eb5b40c67e335b5adb4270a16d
Malware Config
Targets
Target
MD5
Filesize
PO Quotation.jar
1cc049bd0c76d165ac6f78afd0474c6f
89KB
Score
10/10
SHA1
SHA256
SHA512
38503f829afd9f9e17d2f72fda89adab6e598129
c79a8f611b934f2630d4b6fb91240048cc85ecb354f75e01d6a2c444e8c12eed
60753e595658dda0d91cb358c2fe3b84137ce11e0d814fbd1a99cd32d7d0ae06a04ea37a228b1665de73d4bed43e88b7a36961eb5b40c67e335b5adb4270a16d
Tags
Signatures
-
QNodeService
-
Executes dropped EXE
-
JavaScript code in executable
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks