General

  • Target

    qbittorrent_5.0.3_x64_setup.exe

  • Size

    37.5MB

  • Sample

    250126-v8jxlayqbm

  • MD5

    83505c82e83bd2e61bd67dfcf30724cf

  • SHA1

    5fbde5f904a7c0e1346b9bcef4a66a7a7dd7e5b9

  • SHA256

    878ca7e3fb7a90a937afdbe080c055877b4c6334a9589d27e092fd6737a0716f

  • SHA512

    87ead0cac1dd041f7929e68bfdf8b61ac50c9d05a74344ab951f9c624874452e22a30f678a6a059cc3e8906f92189c39cfe7bba6552681140d610edb1b529833

  • SSDEEP

    786432:7nvRa6b9c7DLVZhxGjtYO9NByxgyXXbFTUgCe4Oa0eMe6NwRI/gWfe+C:7paO9c7VZejf3OBbFTU3U+6NxIV+C

Malware Config

Targets

    • Target

      qbittorrent_5.0.3_x64_setup.exe

    • Size

      37.5MB

    • MD5

      83505c82e83bd2e61bd67dfcf30724cf

    • SHA1

      5fbde5f904a7c0e1346b9bcef4a66a7a7dd7e5b9

    • SHA256

      878ca7e3fb7a90a937afdbe080c055877b4c6334a9589d27e092fd6737a0716f

    • SHA512

      87ead0cac1dd041f7929e68bfdf8b61ac50c9d05a74344ab951f9c624874452e22a30f678a6a059cc3e8906f92189c39cfe7bba6552681140d610edb1b529833

    • SSDEEP

      786432:7nvRa6b9c7DLVZhxGjtYO9NByxgyXXbFTUgCe4Oa0eMe6NwRI/gWfe+C:7paO9c7VZejf3OBbFTU3U+6NxIV+C

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      uninst.exe

    • Size

      138KB

    • MD5

      69f11311116dea38b390d99ccc295b24

    • SHA1

      eceb02f012a978f518f0928a00017fe263aeec8a

    • SHA256

      6f0baf53513b09eee91da1e92a4ac6637e606a645b52adee5fd0402de9232548

    • SHA512

      73fe603810ccfe1ad2d43ab9917d6adbe8c189d558ed709c7f703c7400848a18b0a989d0a5b18e6b5208ab3d7d5880dd686dea38fc32b8bee0a207436b20ba2e

    • SSDEEP

      3072:dnPdzuK8Jdw4TMJw3uXceAuH7v6OjxaJE1WQav1vb2MyE:dnPdudwDzmuT6OjxaBQav1TsE

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks