Overview

overview

7

Static

static

3

qbittorren...up.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...lW.dll

windows10-2004-x64

3

qbittorrent.exe

windows10-2004-x64

1

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...lW.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    qbittorrent_5.0.0_x64_setup.exe

  • Size

    37.5MB

  • MD5

    bef1037fb5f78d34dd95e353699db74a

  • SHA1

    7c29e428056fe381afe1f741e04464bb4db4ce88

  • SHA256

    f48ea5324636766d96c27132b31368a304373535cc1fbc400d5d8d4b30fe1693

  • SHA512

    56defd53e6b07f65db7dd85ffff9164358d4a4eeb613c737a82c4ea976f9a5c502b91c389bbdd56fa83db05424bde9c91d2494f7ab541d546d3f3ba8c41e9ea4

  • SSDEEP

    786432:7dCpKYOSSaVS5HWSWELqPsrxOKZo8xjqcGwpawIP9DNU/:7dj/SShWZG2/ojXhIPU/

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • qbittorrent_5.0.0_x64_setup.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.exe
    .exe windows:6 windows x64 arch:x64

    d7fe1989b38d66b5cd44fd34b83300fc


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.pdb
  • qt.conf
  • translations/qt_gl.qm
  • translations/qt_lt.qm
  • translations/qt_pt_PT.qm
  • translations/qt_sl.qm
  • translations/qt_sv.qm
  • translations/qtbase_ar.qm
  • translations/qtbase_bg.qm
  • translations/qtbase_ca.qm
  • translations/qtbase_cs.qm
  • translations/qtbase_da.qm
  • translations/qtbase_de.qm
  • translations/qtbase_es.qm
  • translations/qtbase_fa.qm
  • translations/qtbase_fi.qm
  • translations/qtbase_fr.qm
  • translations/qtbase_gd.qm
  • translations/qtbase_he.qm
  • translations/qtbase_hr.qm
  • translations/qtbase_hu.qm
  • translations/qtbase_it.qm
  • translations/qtbase_ja.qm
  • translations/qtbase_ka.qm
  • translations/qtbase_ko.qm
  • translations/qtbase_lv.qm
  • translations/qtbase_nl.qm
  • translations/qtbase_nn.qm
  • translations/qtbase_pl.qm
  • translations/qtbase_pt_BR.qm
  • translations/qtbase_ru.qm
  • translations/qtbase_sk.qm
  • translations/qtbase_tr.qm
  • translations/qtbase_uk.qm
  • translations/qtbase_zh_CN.qm
  • translations/qtbase_zh_TW.qm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections