Overview

overview

10

Static

static

1

ad52fb74d7...18.jar

windows7-x64

1

ad52fb74d7...18.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad52fb74d7f4783e7b5baf2ad1e70f7b_JaffaCakes118

  • Size

    203KB

  • Sample

    240615-h9r85swbrk

  • MD5

    ad52fb74d7f4783e7b5baf2ad1e70f7b

  • SHA1

    a544c7d47c20dcdccd4b54be2e509797bbe62237

  • SHA256

    a01c71921ba71439c5c5d32269ec8a790d6de630787b8141d960c5c943f8d2b7

  • SHA512

    9147593d76af3bf821f30977a4d31438443e803f290ef196c4256958210cceab215688bdf9f6e612a86c77e97e073f5f1cf59b0cb8ad3215ebb471e33df97da5

  • SSDEEP

    3072:KEBolX+O/fn6G2cWY/w+ZZsHGXwSVG9HMNGS7gwhr8gCCBerAFTpofYRXEhFLk:KeolOOF2ct/7bgSc9H4GoB57tfcLk

Score
10/10
qnodeservicediscoverytrojan

Malware Config

Targets

    • Target

      ad52fb74d7f4783e7b5baf2ad1e70f7b_JaffaCakes118

    • Size

      203KB

    • MD5

      ad52fb74d7f4783e7b5baf2ad1e70f7b

    • SHA1

      a544c7d47c20dcdccd4b54be2e509797bbe62237

    • SHA256

      a01c71921ba71439c5c5d32269ec8a790d6de630787b8141d960c5c943f8d2b7

    • SHA512

      9147593d76af3bf821f30977a4d31438443e803f290ef196c4256958210cceab215688bdf9f6e612a86c77e97e073f5f1cf59b0cb8ad3215ebb471e33df97da5

    • SSDEEP

      3072:KEBolX+O/fn6G2cWY/w+ZZsHGXwSVG9HMNGS7gwhr8gCCBerAFTpofYRXEhFLk:KeolOOF2ct/7bgSc9H4GoB57tfcLk

    Score
    10/10
    qnodeservicediscoverytrojan

    • QNodeService

      Trojan/stealer written in NodeJS and spread via Java downloader.

      trojanqnodeservice

    • Executes dropped EXE

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks