Overview
overview
8Static
static
8uTorrent/uTorrent.exe
windows7-x64
8uTorrent/uTorrent.exe
windows10-2004-x64
8Italian!it.vbs
windows7-x64
1Italian!it.vbs
windows10-2004-x64
1Welsh!cy.vbs
windows7-x64
1Welsh!cy.vbs
windows10-2004-x64
1uTorrent/�...��.bat
windows7-x64
1uTorrent/�...��.bat
windows10-2004-x64
1Behavioral task
behavioral1
Sample
uTorrent/uTorrent.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
uTorrent/uTorrent.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Italian!it.vbs
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Italian!it.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
Welsh!cy.vbs
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Welsh!cy.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
uTorrent/移除残留.bat
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
uTorrent/移除残留.bat
Resource
win10v2004-20220901-en
General
-
Target
d73df5607366f791d6de0b0c05752041bf205e0370b0e9df209a5220bb1d9f94
-
Size
4.0MB
-
MD5
caa04d80e022363e8529a267bd861d0c
-
SHA1
8a00442ac48c9904114d55bd2152ca72592e73bb
-
SHA256
d73df5607366f791d6de0b0c05752041bf205e0370b0e9df209a5220bb1d9f94
-
SHA512
27eeb311ccb68cab1bee7c19185082a7f2f485b700cd4155bbfd86d6cf106e20bfdf3792165491bceba796f92d0ac3eb588f2f121d7af838e3f3707c51e048f2
-
SSDEEP
98304:8cD6k6oep3IPX0xT/bEsfMyAjkDfPvdt4ezOs:dY3If2mjivdt4q
Malware Config
Signatures
-
resource yara_rule static1/unpack001/uTorrent/uTorrent.exe upx
Files
-
d73df5607366f791d6de0b0c05752041bf205e0370b0e9df209a5220bb1d9f94.7z
-
uTorrent/maindoc.ico
-
uTorrent/settings.dat
-
uTorrent/tray.ico
-
uTorrent/uTorrent.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 766KB - Virtual size: 766KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
uTorrent/utorrent.lng.zip
-
Arabic!ar.txt
-
Armenian!hy.txt
-
Basque!eu.txt
-
Belarusian (classical)!betarask.txt
-
Belarusian (official)!be.txt
-
Bosnian!bs.txt
-
Bulgarian!bg.txt
-
Catalan!ca.txt
-
Chinese (Simplified)!zhCN.txt
-
Chinese (Traditional)!zhTW.txt
-
Croatian!hr.txt
-
Czech!cs.txt
-
Danish!da.txt
-
Dutch!nl.txt
-
Estonian!et.txt
-
Finnish!fi.txt
-
French!fr.txt
-
Gaeilge (Irish)!ga.txt
-
Galician!gl.txt
-
German!de.txt
-
Greek!el.txt
-
Hebrew!he.txt
-
Hungarian!hu.txt
-
Indonesian!id.txt
-
Italian!it.txt.vbs
-
Japanese!ja.txt
-
Kabyle!kab.txt
-
Korean!ko.txt
-
Kurdish (Sorani)!ckb.txt
-
Latvian!lv.txt
-
Lithuanian!lt.txt
-
Nepali!ne.txt
-
Norwegian (Bokmal)!nb.txt
-
Norwegian (Nynorsk)!nn.txt
-
Persian!fa.txt
-
Polish!pl.txt
-
Portuguese (Brazil)!ptBR.txt
-
Portuguese (Portugal)!pt.txt
-
Romanian!ro.txt
-
Russian!ru.txt
-
Serbian (Cyrillic)!srSR.txt
-
Serbian (Latin)!srYU.txt
-
Sinhala!si.txt
-
Slovak!sk.txt
-
Slovenian!sl.txt
-
Spanish!es.txt
-
Swedish!sv.txt
-
Taiwan!tw.txt
-
Tatar!tt.txt
-
Thai!th.txt
-
Turkish!tr.txt
-
Ukrainian!uk.txt
-
Uzbek!uz.txt
-
Vietnamese!vi.txt
-
Welsh!cy.txt.vbs
-
english.txt
-
version
-
uTorrent/移除残留.bat