General
-
Target
qbittorrent_5.0.3_x64_setup.exe
-
Size
37.5MB
-
Sample
250126-v8jxlayqbm
-
MD5
83505c82e83bd2e61bd67dfcf30724cf
-
SHA1
5fbde5f904a7c0e1346b9bcef4a66a7a7dd7e5b9
-
SHA256
878ca7e3fb7a90a937afdbe080c055877b4c6334a9589d27e092fd6737a0716f
-
SHA512
87ead0cac1dd041f7929e68bfdf8b61ac50c9d05a74344ab951f9c624874452e22a30f678a6a059cc3e8906f92189c39cfe7bba6552681140d610edb1b529833
-
SSDEEP
786432:7nvRa6b9c7DLVZhxGjtYO9NByxgyXXbFTUgCe4Oa0eMe6NwRI/gWfe+C:7paO9c7VZejf3OBbFTU3U+6NxIV+C
Static task
static1
Behavioral task
behavioral1
Sample
qbittorrent_5.0.3_x64_setup.exe
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral2
Sample
qbittorrent_5.0.3_x64_setup.exe
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
uninst.exe
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral4
Sample
uninst.exe
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
qbittorrent_5.0.3_x64_setup.exe
-
Size
37.5MB
-
MD5
83505c82e83bd2e61bd67dfcf30724cf
-
SHA1
5fbde5f904a7c0e1346b9bcef4a66a7a7dd7e5b9
-
SHA256
878ca7e3fb7a90a937afdbe080c055877b4c6334a9589d27e092fd6737a0716f
-
SHA512
87ead0cac1dd041f7929e68bfdf8b61ac50c9d05a74344ab951f9c624874452e22a30f678a6a059cc3e8906f92189c39cfe7bba6552681140d610edb1b529833
-
SSDEEP
786432:7nvRa6b9c7DLVZhxGjtYO9NByxgyXXbFTUgCe4Oa0eMe6NwRI/gWfe+C:7paO9c7VZejf3OBbFTU3U+6NxIV+C
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
uninst.exe
-
Size
138KB
-
MD5
69f11311116dea38b390d99ccc295b24
-
SHA1
eceb02f012a978f518f0928a00017fe263aeec8a
-
SHA256
6f0baf53513b09eee91da1e92a4ac6637e606a645b52adee5fd0402de9232548
-
SHA512
73fe603810ccfe1ad2d43ab9917d6adbe8c189d558ed709c7f703c7400848a18b0a989d0a5b18e6b5208ab3d7d5880dd686dea38fc32b8bee0a207436b20ba2e
-
SSDEEP
3072:dnPdzuK8Jdw4TMJw3uXceAuH7v6OjxaJE1WQav1vb2MyE:dnPdudwDzmuT6OjxaBQav1TsE
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-