qnodeservice | bbc572cced7c94d63a7208f4aba4ed20d1350bef153b099035a86c95c8d96d4a | Triage

Resubmissions

13-11-2024 10:38

241113-mps26atlgq 10

27-10-2024 14:54

241027-r9xcjawpgz 10

Sharing

General

Target

Adwind.exe
Size

5KB
Sample

241113-mps26atlgq
MD5

fe537a3346590c04d81d357e3c4be6e8
SHA1

b1285f1d8618292e17e490857d1bdf0a79104837
SHA256

bbc572cced7c94d63a7208f4aba4ed20d1350bef153b099035a86c95c8d96d4a
SHA512

50a5c1ad99ee9f3a540cb30e87ebfdf7561f0a0ee35b3d06c394fa2bad06ca6088a04848ddcb25f449b3c98b89a91d1ba5859f1ed6737119b606968be250c8ce
SSDEEP

96:w9fXh7CBF8l1cHRDOjY4YbiPkW7UW1g+dWi9sBSy3HQNm6wx2xC7vz5:GXh78hHRDOU4YWPk2J14i9E3ymBxW+

Score

10^/10

qnodeservice trojan

Malware Config

Targets

- Target
  
  Adwind.exe
- Size
  
  5KB
- MD5
  
  fe537a3346590c04d81d357e3c4be6e8
- SHA1
  
  b1285f1d8618292e17e490857d1bdf0a79104837
- SHA256
  
  bbc572cced7c94d63a7208f4aba4ed20d1350bef153b099035a86c95c8d96d4a
- SHA512
  
  50a5c1ad99ee9f3a540cb30e87ebfdf7561f0a0ee35b3d06c394fa2bad06ca6088a04848ddcb25f449b3c98b89a91d1ba5859f1ed6737119b606968be250c8ce
- SSDEEP
  
  96:w9fXh7CBF8l1cHRDOjY4YbiPkW7UW1g+dWi9sBSy3HQNm6wx2xC7vz5:GXh78hHRDOU4YWPk2J14i9E3ymBxW+
Score

10^/10

qnodeservice trojan
- QNodeService
  Trojan/stealer written in NodeJS and spread via Java downloader.
  trojan qnodeservice
- Qnodeservice family
  qnodeservice
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

qnodeservicetrojan

behavioral2

qnodeservicetrojan