Overview

overview

10

Static

static

RFQ-HSO-76...-1.jar

windows7_x64

1

RFQ-HSO-76...-1.jar

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RFQ-HSO-76411758-1.jar

  • Size

    85KB

  • Sample

    201120-9nkl337sfs

  • MD5

    dfb8376d1168bfda3e5b14cc178e7889

  • SHA1

    e0ad99d56ed5bc570487919c898eacbb2157986a

  • SHA256

    82e6c353c73c37d89e87eebfb9cccbc5b717f1a6aad3f560b32a5aa5c28a2115

  • SHA512

    1a4b02326706f0412062c98900f853f1e275134da1a525666ff86c0a93de8df61fa9f62448ed66379203de0f177facbc02981a783ed78f2ce788cae04dc47e81

Score
10/10
qnodeservicetrojan

Malware Config

Targets

    • Target

      RFQ-HSO-76411758-1.jar

    • Size

      85KB

    • MD5

      dfb8376d1168bfda3e5b14cc178e7889

    • SHA1

      e0ad99d56ed5bc570487919c898eacbb2157986a

    • SHA256

      82e6c353c73c37d89e87eebfb9cccbc5b717f1a6aad3f560b32a5aa5c28a2115

    • SHA512

      1a4b02326706f0412062c98900f853f1e275134da1a525666ff86c0a93de8df61fa9f62448ed66379203de0f177facbc02981a783ed78f2ce788cae04dc47e81

    Score
    10/10
    qnodeservicetrojan

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks