Resubmissions

31-03-2024 16:49

240331-vbyz9afb9s 7

General

  • Target

    qbittorrent_4.6.4_x64_setup.exe

  • Size

    34.0MB

  • Sample

    240331-vbyz9afb9s

  • MD5

    918224925563095d15dbab7c34b3bf17

  • SHA1

    33902285adf411e5824547e849a4adcfc6531114

  • SHA256

    96bac43faac2b1fa5e0bc495975b2e642af5da181e313a9c8f541912b83c0edb

  • SHA512

    4d6bd949693ea60671ddb8dc19ec87d8e02bf4888aca290318488ca696e495e13bf49161ac8f75cfff9befb72589ab2bedcd1138fa9d81c5bf071191d6344b28

  • SSDEEP

    786432:7KMXiEtPqJO5MB3/UOd64S49KmFRc85C2uWF3Dzn:7DXioy0DOd6o1HtuW5/

Score
7/10

Malware Config

Targets

    • Target

      qbittorrent_4.6.4_x64_setup.exe

    • Size

      34.0MB

    • MD5

      918224925563095d15dbab7c34b3bf17

    • SHA1

      33902285adf411e5824547e849a4adcfc6531114

    • SHA256

      96bac43faac2b1fa5e0bc495975b2e642af5da181e313a9c8f541912b83c0edb

    • SHA512

      4d6bd949693ea60671ddb8dc19ec87d8e02bf4888aca290318488ca696e495e13bf49161ac8f75cfff9befb72589ab2bedcd1138fa9d81c5bf071191d6344b28

    • SSDEEP

      786432:7KMXiEtPqJO5MB3/UOd64S49KmFRc85C2uWF3Dzn:7DXioy0DOd6o1HtuW5/

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks