General
-
Target
qbittorrent_5.0.3_x64_setup.exe
-
Size
37.5MB
-
Sample
241223-zl9lys1kbz
-
MD5
83505c82e83bd2e61bd67dfcf30724cf
-
SHA1
5fbde5f904a7c0e1346b9bcef4a66a7a7dd7e5b9
-
SHA256
878ca7e3fb7a90a937afdbe080c055877b4c6334a9589d27e092fd6737a0716f
-
SHA512
87ead0cac1dd041f7929e68bfdf8b61ac50c9d05a74344ab951f9c624874452e22a30f678a6a059cc3e8906f92189c39cfe7bba6552681140d610edb1b529833
-
SSDEEP
786432:7nvRa6b9c7DLVZhxGjtYO9NByxgyXXbFTUgCe4Oa0eMe6NwRI/gWfe+C:7paO9c7VZejf3OBbFTU3U+6NxIV+C
Static task
static1
Malware Config
Targets
-
-
Target
qbittorrent_5.0.3_x64_setup.exe
-
Size
37.5MB
-
MD5
83505c82e83bd2e61bd67dfcf30724cf
-
SHA1
5fbde5f904a7c0e1346b9bcef4a66a7a7dd7e5b9
-
SHA256
878ca7e3fb7a90a937afdbe080c055877b4c6334a9589d27e092fd6737a0716f
-
SHA512
87ead0cac1dd041f7929e68bfdf8b61ac50c9d05a74344ab951f9c624874452e22a30f678a6a059cc3e8906f92189c39cfe7bba6552681140d610edb1b529833
-
SSDEEP
786432:7nvRa6b9c7DLVZhxGjtYO9NByxgyXXbFTUgCe4Oa0eMe6NwRI/gWfe+C:7paO9c7VZejf3OBbFTU3U+6NxIV+C
-
Contacts a large (919) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-