General

  • Target

    qbittorrent_4.6.7_x64_setup.exe

  • Size

    34.0MB

  • Sample

    241009-v2d3rsvakc

  • MD5

    4a661229b67f252a10b796f6a38dd915

  • SHA1

    f1dbea4b26724b4a3cd73249ebf058bf0852a0df

  • SHA256

    4c3047ca4f9ba6009989906d744a9e71e58c4755e924f0a5fcc60c4ef5c4b009

  • SHA512

    c75176330a63a312f383e1466a005012c929d310dd26ce9ccfa51a63b35ca3b68eee7d3504abd0f946fee9101e22046ce2055b9b5877e36de013d0bd7c876d08

  • SSDEEP

    786432:7z3M/Ab93rmUT5mPoYBhZsFKhqE3HfkvMpeaqsPl6Mzb7N0+IP:7z3YAb97mWUP4UhqoHfkYeaeOZIP

Score
7/10

Malware Config

Targets

    • Target

      qbittorrent_4.6.7_x64_setup.exe

    • Size

      34.0MB

    • MD5

      4a661229b67f252a10b796f6a38dd915

    • SHA1

      f1dbea4b26724b4a3cd73249ebf058bf0852a0df

    • SHA256

      4c3047ca4f9ba6009989906d744a9e71e58c4755e924f0a5fcc60c4ef5c4b009

    • SHA512

      c75176330a63a312f383e1466a005012c929d310dd26ce9ccfa51a63b35ca3b68eee7d3504abd0f946fee9101e22046ce2055b9b5877e36de013d0bd7c876d08

    • SSDEEP

      786432:7z3M/Ab93rmUT5mPoYBhZsFKhqE3HfkvMpeaqsPl6Mzb7N0+IP:7z3YAb97mWUP4UhqoHfkYeaeOZIP

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      qbittorrent.exe

    • Size

      30.9MB

    • MD5

      69a660fa6a9c0201396d741570672a54

    • SHA1

      9c5e201433b856dcc0ade84efb8cfcb666634b4c

    • SHA256

      bc3cf1e220e85c326278550d532eb92b5d79ff100a125e54479087d045f968ae

    • SHA512

      54d4f1701d87b6cc18e77b774c2cba29e981b0f1c08fbe797cf2ff6742d32868f32775ef68d0fb8c4cd3508b56ca5646862a0c1f4c1c8ce2692b73a40afe493a

    • SSDEEP

      393216:bBEEwOcGYXlGeDCuE7UMvXMns1frKZ/s4t1RXYf6fr50nIKFdu9CwJsv6t+uDk:bsfiRrysBfsr8rgk

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks