General
-
Target
utorrent_installer.exe
-
Size
1.7MB
-
Sample
230906-vpkd1saa5t
-
MD5
241ce365f228ee5f74d81b3fea14e09a
-
SHA1
700b05506dd3eebb4b87ff545f6d2bb6af6a3ae3
-
SHA256
bf4ee47d0df1870104f4fada8a68c2fb29e94fea9284c7bb6a6b385a718d8a18
-
SHA512
bf3756fb2b037a10592498f08e6eb3bad8f50da4ff9e96703e646a69ea1481e6801023abb3b1aae923fb2c68bb21ae5bb50f8e675b57ff90504c8e7ee8f81593
-
SSDEEP
49152:9BuZrEUT97LZxMPrlDZFBmS06nIJOZobMP:LkLp/ZSr97Bmb6naO6bs
Static task
static1
Behavioral task
behavioral1
Sample
utorrent_installer.exe
Resource
win10v2004-20230831-en
Malware Config
Targets
-
-
Target
utorrent_installer.exe
-
Size
1.7MB
-
MD5
241ce365f228ee5f74d81b3fea14e09a
-
SHA1
700b05506dd3eebb4b87ff545f6d2bb6af6a3ae3
-
SHA256
bf4ee47d0df1870104f4fada8a68c2fb29e94fea9284c7bb6a6b385a718d8a18
-
SHA512
bf3756fb2b037a10592498f08e6eb3bad8f50da4ff9e96703e646a69ea1481e6801023abb3b1aae923fb2c68bb21ae5bb50f8e675b57ff90504c8e7ee8f81593
-
SSDEEP
49152:9BuZrEUT97LZxMPrlDZFBmS06nIJOZobMP:LkLp/ZSr97Bmb6naO6bs
-
Bazar/Team9 Loader payload
-
Downloads MZ/PE file
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-