Overview
overview
10Static
static
10qbittorren...up.exe
windows11-21h2-x64
10$PLUGINSDI...er.bmp
windows11-21h2-x64
3$PLUGINSDI...rd.bmp
windows11-21h2-x64
3qbittorrent.pdb
windows11-21h2-x64
3qt.conf
windows11-21h2-x64
3translations/qt_gl.qm
windows11-21h2-x64
3translations/qt_lt.qm
windows11-21h2-x64
3translatio..._PT.qm
windows11-21h2-x64
3translations/qt_sl.qm
windows11-21h2-x64
3translations/qt_sv.qm
windows11-21h2-x64
3translatio..._ar.qm
windows11-21h2-x64
3translatio..._bg.qm
windows11-21h2-x64
3translatio..._ca.qm
windows11-21h2-x64
3translatio..._cs.qm
windows11-21h2-x64
3translatio..._da.qm
windows11-21h2-x64
3translatio..._de.qm
windows11-21h2-x64
3translatio..._es.qm
windows11-21h2-x64
3translatio..._fa.qm
windows11-21h2-x64
3translatio..._fi.qm
windows11-21h2-x64
3translatio..._fr.qm
windows11-21h2-x64
3translatio..._gd.qm
windows11-21h2-x64
3translatio..._he.qm
windows11-21h2-x64
3translatio..._hr.qm
windows11-21h2-x64
3translatio..._hu.qm
windows11-21h2-x64
3translatio..._it.qm
windows11-21h2-x64
3translatio..._ja.qm
windows11-21h2-x64
3translatio..._ko.qm
windows11-21h2-x64
3translatio..._lv.qm
windows11-21h2-x64
3translatio..._nl.qm
windows11-21h2-x64
3translatio..._nn.qm
windows11-21h2-x64
3translatio..._pl.qm
windows11-21h2-x64
3uninst.exe
windows11-21h2-x64
7Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system -
submitted
17-01-2024 22:59
Behavioral task
behavioral1
Sample
qbittorrent_4.5.4_x64_setup.exe
Resource
win11-20231215-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win11-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20231215-en
Behavioral task
behavioral4
Sample
qbittorrent.pdb
Resource
win11-20231215-en
Behavioral task
behavioral5
Sample
qt.conf
Resource
win11-20231222-en
Behavioral task
behavioral6
Sample
translations/qt_gl.qm
Resource
win11-20231215-en
Behavioral task
behavioral7
Sample
translations/qt_lt.qm
Resource
win11-20231215-en
Behavioral task
behavioral8
Sample
translations/qt_pt_PT.qm
Resource
win11-20231215-en
Behavioral task
behavioral9
Sample
translations/qt_sl.qm
Resource
win11-20231222-en
Behavioral task
behavioral10
Sample
translations/qt_sv.qm
Resource
win11-20231215-en
Behavioral task
behavioral11
Sample
translations/qtbase_ar.qm
Resource
win11-20231215-en
Behavioral task
behavioral12
Sample
translations/qtbase_bg.qm
Resource
win11-20231215-en
Behavioral task
behavioral13
Sample
translations/qtbase_ca.qm
Resource
win11-20231215-en
Behavioral task
behavioral14
Sample
translations/qtbase_cs.qm
Resource
win11-20231215-en
Behavioral task
behavioral15
Sample
translations/qtbase_da.qm
Resource
win11-20231215-en
Behavioral task
behavioral16
Sample
translations/qtbase_de.qm
Resource
win11-20231222-en
Behavioral task
behavioral17
Sample
translations/qtbase_es.qm
Resource
win11-20231215-en
Behavioral task
behavioral18
Sample
translations/qtbase_fa.qm
Resource
win11-20231222-en
Behavioral task
behavioral19
Sample
translations/qtbase_fi.qm
Resource
win11-20231215-en
Behavioral task
behavioral20
Sample
translations/qtbase_fr.qm
Resource
win11-20231215-en
Behavioral task
behavioral21
Sample
translations/qtbase_gd.qm
Resource
win11-20231215-en
Behavioral task
behavioral22
Sample
translations/qtbase_he.qm
Resource
win11-20231215-en
Behavioral task
behavioral23
Sample
translations/qtbase_hr.qm
Resource
win11-20231215-en
Behavioral task
behavioral24
Sample
translations/qtbase_hu.qm
Resource
win11-20231215-en
Behavioral task
behavioral25
Sample
translations/qtbase_it.qm
Resource
win11-20231215-en
Behavioral task
behavioral26
Sample
translations/qtbase_ja.qm
Resource
win11-20231215-en
Behavioral task
behavioral27
Sample
translations/qtbase_ko.qm
Resource
win11-20231215-en
Behavioral task
behavioral28
Sample
translations/qtbase_lv.qm
Resource
win11-20231215-en
Behavioral task
behavioral29
Sample
translations/qtbase_nl.qm
Resource
win11-20231222-en
Behavioral task
behavioral30
Sample
translations/qtbase_nn.qm
Resource
win11-20231215-en
Behavioral task
behavioral31
Sample
translations/qtbase_pl.qm
Resource
win11-20231215-en
Behavioral task
behavioral32
Sample
uninst.exe
Resource
win11-20231215-en
General
-
Target
translations/qtbase_gd.qm
-
Size
185KB
-
MD5
eb1fb93b0be51c2ad78fc7ba2f8b9f42
-
SHA1
24f7ff809e2f11c579cd388fea5a4c552ff8d4d0
-
SHA256
63b439dd44139aa3aed54c2ebe03fa9bc77f22c14ed8fba8eff2608445bb233d
-
SHA512
e13770aef33b6666ed7d54e03ee20ca291d4167d673ba6c61d8e64cdd5f7ffe0a9521b95af67be719bf263932ecf16e2b2d0b5f3404f9bcd7879114fcc6fc474
-
SSDEEP
1536:SiaI3C87jhakhR0VGkw7ys7CskUH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:S2yGjh17yGqxTXhvQoejJd8FUjVgk
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-334598701-2770630493-3015612279-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-334598701-2770630493-3015612279-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 1016 OpenWith.exe