Resubmissions

20/04/2024, 18:33

240420-w6723seg96 8

20/04/2024, 18:30

240420-w5h2kaeg49 4

20/04/2024, 18:25

240420-w2ly2sfa91 3

General

  • Target

    qbit.zip

  • Size

    34.0MB

  • MD5

    66b99f13e8d79ba71f7d3a4a84d99a75

  • SHA1

    7ccaa3121d44d37e9ae2377b7a782300bb7a68e1

  • SHA256

    76b117cf47ad04ec0efdcfc73112d4855921177ed11476293478c280033430b3

  • SHA512

    5b8dbddbc5bb8e5d8c9e7883e6e1f1e888f94e4ea30d5a1f30dc2cf74f4d46854fa3843141f95c837ea03196dfd3531de410a93a7914db56cf926c36294b7c74

  • SSDEEP

    786432:/sfmg1bqLkfAzfDIEZ2CCCxKintfkWVSqCa9Zbxk:kfmeWAdEZ2qtt7Ca/y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • qbit.zip
    .zip
  • qbit/download.txt
  • qbit/qbittorrent_4.6.4_x64_setup.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.exe
    .exe windows:6 windows x64 arch:x64

    1b808774e915d7bae0ae17f2d54477d4


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.pdb
  • qt.conf
  • translations/qt_gl.qm
  • translations/qt_lt.qm
  • translations/qt_pt_PT.qm
  • translations/qt_sl.qm
  • translations/qt_sv.qm
  • translations/qtbase_ar.qm
  • translations/qtbase_bg.qm
  • translations/qtbase_ca.qm
  • translations/qtbase_cs.qm
  • translations/qtbase_da.qm
  • translations/qtbase_de.qm
  • translations/qtbase_es.qm
  • translations/qtbase_fa.qm
  • translations/qtbase_fi.qm
  • translations/qtbase_fr.qm
  • translations/qtbase_gd.qm
  • translations/qtbase_he.qm
  • translations/qtbase_hr.qm
  • translations/qtbase_hu.qm
  • translations/qtbase_it.qm
  • translations/qtbase_ja.qm
  • translations/qtbase_ko.qm
  • translations/qtbase_lv.qm
  • translations/qtbase_nl.qm
  • translations/qtbase_nn.qm
  • translations/qtbase_pl.qm
  • translations/qtbase_pt_BR.qm
  • translations/qtbase_ru.qm
  • translations/qtbase_sk.qm
  • translations/qtbase_tr.qm
  • translations/qtbase_uk.qm
  • translations/qtbase_zh_CN.qm
  • translations/qtbase_zh_TW.qm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections