Overview

overview

3

Static

static

3

Desktop.rar

windows7-x64

3

Desktop.rar

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...lW.dll

windows7-x64

3

$PLUGINSDI...lW.dll

windows10-2004-x64

3

qbittorrent.exe

windows7-x64

1

qbittorrent.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Desktop.rar

  • Size

    28.2MB

  • MD5

    a53195ba3393b1b22dc10aa1fb89138e

  • SHA1

    4d14bdc398738571f5f54645c6cfa1f71599c5d5

  • SHA256

    2493b1670448dd397094a7c28368d91f5eb97fd2f959d04d6c9ca5082e522c58

  • SHA512

    f8bb56d7dd41e3b628778048854d4d037f34983c9c717a343363878c923b3f54b41df9f823587de142680260a30387ec5bae9bdd90acd8a86d2cf7a843bc0c05

  • SSDEEP

    786432:Fb6O1bbEkl5P8wfg1xa5eo5HxIMqKMt/cNu8Wy+xMVo:FGO1b4Y141CZxIM7uB8fIMq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Desktop.rar
    .rar
  • Risk_of_Rain_2_1.2.4.4.torrent
  • [FreeTP.Org]Risk-of-Rain-2-Multiplayer-Fix-Online.exe
    .exe windows:5 windows x86 arch:x86

    483f0c4259a9148c34961abbda6146c1


    Headers

    Imports

    Sections

  • qbittorrent_4.3.6_x64_setup.exe
    .exe windows:4 windows x86 arch:x86

    c05041e01f84e1ccca9c4451f3b6a383


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.exe
    .exe windows:6 windows x64 arch:x64

    5d424bcf95b6ab1d0fdd9378b9ff9c86


    Headers

    Imports

    Sections

  • qbittorrent.pdb
  • qt.conf
  • translations/qt_fa.qm
  • translations/qt_gl.qm
  • translations/qt_lt.qm
  • translations/qt_pt.qm
  • translations/qt_sl.qm
  • translations/qt_sv.qm
  • translations/qt_zh_CN.qm
  • translations/qtbase_ar.qm
  • translations/qtbase_bg.qm
  • translations/qtbase_ca.qm
  • translations/qtbase_cs.qm
  • translations/qtbase_da.qm
  • translations/qtbase_de.qm
  • translations/qtbase_es.qm
  • translations/qtbase_fi.qm
  • translations/qtbase_fr.qm
  • translations/qtbase_gd.qm
  • translations/qtbase_he.qm
  • translations/qtbase_hu.qm
  • translations/qtbase_it.qm
  • translations/qtbase_ja.qm
  • translations/qtbase_ko.qm
  • translations/qtbase_lv.qm
  • translations/qtbase_pl.qm
  • translations/qtbase_ru.qm
  • translations/qtbase_sk.qm
  • translations/qtbase_tr.qm
  • translations/qtbase_uk.qm
  • translations/qtbase_zh_TW.qm