Overview
overview
10Static
static
10qbittorren...up.exe
windows11-21h2-x64
10$PLUGINSDI...er.bmp
windows11-21h2-x64
3$PLUGINSDI...rd.bmp
windows11-21h2-x64
3qbittorrent.pdb
windows11-21h2-x64
3qt.conf
windows11-21h2-x64
3translations/qt_gl.qm
windows11-21h2-x64
3translations/qt_lt.qm
windows11-21h2-x64
3translatio..._PT.qm
windows11-21h2-x64
3translations/qt_sl.qm
windows11-21h2-x64
3translations/qt_sv.qm
windows11-21h2-x64
3translatio..._ar.qm
windows11-21h2-x64
3translatio..._bg.qm
windows11-21h2-x64
3translatio..._ca.qm
windows11-21h2-x64
3translatio..._cs.qm
windows11-21h2-x64
3translatio..._da.qm
windows11-21h2-x64
3translatio..._de.qm
windows11-21h2-x64
3translatio..._es.qm
windows11-21h2-x64
3translatio..._fa.qm
windows11-21h2-x64
3translatio..._fi.qm
windows11-21h2-x64
3translatio..._fr.qm
windows11-21h2-x64
3translatio..._gd.qm
windows11-21h2-x64
3translatio..._he.qm
windows11-21h2-x64
3translatio..._hr.qm
windows11-21h2-x64
3translatio..._hu.qm
windows11-21h2-x64
3translatio..._it.qm
windows11-21h2-x64
3translatio..._ja.qm
windows11-21h2-x64
3translatio..._ko.qm
windows11-21h2-x64
3translatio..._lv.qm
windows11-21h2-x64
3translatio..._nl.qm
windows11-21h2-x64
3translatio..._nn.qm
windows11-21h2-x64
3translatio..._pl.qm
windows11-21h2-x64
3uninst.exe
windows11-21h2-x64
7Analysis
-
max time kernel
85s -
max time network
90s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system -
submitted
17-01-2024 22:59
Behavioral task
behavioral1
Sample
qbittorrent_4.5.4_x64_setup.exe
Resource
win11-20231215-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win11-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20231215-en
Behavioral task
behavioral4
Sample
qbittorrent.pdb
Resource
win11-20231215-en
Behavioral task
behavioral5
Sample
qt.conf
Resource
win11-20231222-en
Behavioral task
behavioral6
Sample
translations/qt_gl.qm
Resource
win11-20231215-en
Behavioral task
behavioral7
Sample
translations/qt_lt.qm
Resource
win11-20231215-en
Behavioral task
behavioral8
Sample
translations/qt_pt_PT.qm
Resource
win11-20231215-en
Behavioral task
behavioral9
Sample
translations/qt_sl.qm
Resource
win11-20231222-en
Behavioral task
behavioral10
Sample
translations/qt_sv.qm
Resource
win11-20231215-en
Behavioral task
behavioral11
Sample
translations/qtbase_ar.qm
Resource
win11-20231215-en
Behavioral task
behavioral12
Sample
translations/qtbase_bg.qm
Resource
win11-20231215-en
Behavioral task
behavioral13
Sample
translations/qtbase_ca.qm
Resource
win11-20231215-en
Behavioral task
behavioral14
Sample
translations/qtbase_cs.qm
Resource
win11-20231215-en
Behavioral task
behavioral15
Sample
translations/qtbase_da.qm
Resource
win11-20231215-en
Behavioral task
behavioral16
Sample
translations/qtbase_de.qm
Resource
win11-20231222-en
Behavioral task
behavioral17
Sample
translations/qtbase_es.qm
Resource
win11-20231215-en
Behavioral task
behavioral18
Sample
translations/qtbase_fa.qm
Resource
win11-20231222-en
Behavioral task
behavioral19
Sample
translations/qtbase_fi.qm
Resource
win11-20231215-en
Behavioral task
behavioral20
Sample
translations/qtbase_fr.qm
Resource
win11-20231215-en
Behavioral task
behavioral21
Sample
translations/qtbase_gd.qm
Resource
win11-20231215-en
Behavioral task
behavioral22
Sample
translations/qtbase_he.qm
Resource
win11-20231215-en
Behavioral task
behavioral23
Sample
translations/qtbase_hr.qm
Resource
win11-20231215-en
Behavioral task
behavioral24
Sample
translations/qtbase_hu.qm
Resource
win11-20231215-en
Behavioral task
behavioral25
Sample
translations/qtbase_it.qm
Resource
win11-20231215-en
Behavioral task
behavioral26
Sample
translations/qtbase_ja.qm
Resource
win11-20231215-en
Behavioral task
behavioral27
Sample
translations/qtbase_ko.qm
Resource
win11-20231215-en
Behavioral task
behavioral28
Sample
translations/qtbase_lv.qm
Resource
win11-20231215-en
Behavioral task
behavioral29
Sample
translations/qtbase_nl.qm
Resource
win11-20231222-en
Behavioral task
behavioral30
Sample
translations/qtbase_nn.qm
Resource
win11-20231215-en
Behavioral task
behavioral31
Sample
translations/qtbase_pl.qm
Resource
win11-20231215-en
Behavioral task
behavioral32
Sample
uninst.exe
Resource
win11-20231215-en
General
-
Target
qbittorrent.pdb
-
Size
129.3MB
-
MD5
4bbd7819be43dfd0cdc8f32e25235373
-
SHA1
7ff0a08af8f3849190ad39c75567c9021548468e
-
SHA256
ca0ce177fd605715ad13afc59bc2620982b76c92914198208294554e3272014e
-
SHA512
d3fdbc9a419d2f21b3ca9188e9734ebba5e7a48478dc997d3531fd3de4f8943bc0b5c78f78cedc0c82ee0bdb1deb6ad95fc82aae1730027e46e00638a7b270fa
-
SSDEEP
393216:NoEAR6NS6wxm7HP+IpxW4/Rtkx4PqqGHEjtXgBzrpNSKeS:NoEARowC5WuPqXkKz
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-771046930-2949676035-3337286276-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-771046930-2949676035-3337286276-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3468 OpenWith.exe