Overview

overview

7

Static

static

3

qbittorren...up.exe

windows7-x64

7

qbittorren...up.exe

windows10-2004-x64

7

$PLUGINSDI...er.bmp

windows7-x64

3

$PLUGINSDI...er.bmp

windows10-2004-x64

7

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

qbittorrent.pdb

windows7-x64

3

qbittorrent.pdb

windows10-2004-x64

3

qt.conf

windows7-x64

3

qt.conf

windows10-2004-x64

3

translations/qt_gl.qm

windows7-x64

3

translations/qt_gl.qm

windows10-2004-x64

3

translations/qt_lt.qm

windows7-x64

3

translations/qt_lt.qm

windows10-2004-x64

3

translatio..._PT.qm

windows7-x64

3

translatio..._PT.qm

windows10-2004-x64

3

translations/qt_sl.qm

windows7-x64

3

translations/qt_sl.qm

windows10-2004-x64

3

translations/qt_sv.qm

windows7-x64

3

translations/qt_sv.qm

windows10-2004-x64

3

translatio..._ar.qm

windows7-x64

3

translatio..._ar.qm

windows10-2004-x64

3

translatio..._bg.qm

windows7-x64

3

translatio..._bg.qm

windows10-2004-x64

3

translatio..._ca.qm

windows7-x64

3

translatio..._ca.qm

windows10-2004-x64

3

translatio..._cs.qm

windows7-x64

3

translatio..._cs.qm

windows10-2004-x64

3

translatio..._da.qm

windows7-x64

3

translatio..._da.qm

windows10-2004-x64

3

translatio..._de.qm

windows7-x64

3

translatio..._de.qm

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    qbittorrent_5.0.0_lt20_qt6_x64_setup.exe

  • Size

    39.8MB

  • MD5

    7531dfd09cae5f7477c5d18c798fa9b2

  • SHA1

    211826f0c20f7c90d3b52968ebfbf809dd6b9c8d

  • SHA256

    858eb057d8bb2d6bef954d4a42d917dab1b8d99049f0d39b9469cc3f1934e6b9

  • SHA512

    2085ba11dfbbd3ff7a7d98590b27ac64a8a606cf7c62880eefad392d672aafd775a7f2d1acbfcb80a0665721e305f3a6798f14b925411c7b4f2536582cc54947

  • SSDEEP

    786432:703/FLOb0kh+VS2VSLjgb76ZxnxXauhqwcSAKTGVJASST4j/FQ:70ob0kMsLdnxKSqeGvkT4LFQ

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • qbittorrent_5.0.0_lt20_qt6_x64_setup.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.exe
    .exe windows:6 windows x64 arch:x64

    a4a7b87fbd618b40c156d103553751c5


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.pdb
  • qt.conf
  • translations/qt_gl.qm
  • translations/qt_lt.qm
  • translations/qt_pt_PT.qm
  • translations/qt_sl.qm
  • translations/qt_sv.qm
  • translations/qtbase_ar.qm
  • translations/qtbase_bg.qm
  • translations/qtbase_ca.qm
  • translations/qtbase_cs.qm
  • translations/qtbase_da.qm
  • translations/qtbase_de.qm
  • translations/qtbase_es.qm
  • translations/qtbase_fa.qm
  • translations/qtbase_fi.qm
  • translations/qtbase_fr.qm
  • translations/qtbase_gd.qm
  • translations/qtbase_he.qm
  • translations/qtbase_hr.qm
  • translations/qtbase_hu.qm
  • translations/qtbase_it.qm
  • translations/qtbase_ja.qm
  • translations/qtbase_ka.qm
  • translations/qtbase_ko.qm
  • translations/qtbase_lv.qm
  • translations/qtbase_nl.qm
  • translations/qtbase_nn.qm
  • translations/qtbase_pl.qm
  • translations/qtbase_pt_BR.qm
  • translations/qtbase_ru.qm
  • translations/qtbase_sk.qm
  • translations/qtbase_tr.qm
  • translations/qtbase_uk.qm
  • translations/qtbase_zh_CN.qm
  • translations/qtbase_zh_TW.qm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections