General

  • Target

    CapCut_1_5_1_245_capcutpc_0.exe

  • Size

    389.6MB

  • Sample

    230305-ms49lagc62

  • MD5

    3f6e83001e8b00ffb3fe4a46a225a392

  • SHA1

    8ea04d7a107c7e1e1800963b6b3679be38d9ad26

  • SHA256

    8910ad23b09a097235cedf09448484d2167aa3f0134ba5c30a18223721c0abf5

  • SHA512

    ebf81583ff7fa0226239ea03653c4a35bf84cebffc6c367f190983fce7ce5b3dadc39e47c87e323248f71d67f81db3424ddf8f3760c3167188880b9d20aeac82

  • SSDEEP

    12582912:AxKcllijFwgj0DWQK2Uc3y0ySmkFZavCJxqPGOV:AAclliHjpI3FmH6jq+q

Score
7/10

Malware Config

Targets

    • Target

      CapCut_1_5_1_245_capcutpc_0.exe

    • Size

      389.6MB

    • MD5

      3f6e83001e8b00ffb3fe4a46a225a392

    • SHA1

      8ea04d7a107c7e1e1800963b6b3679be38d9ad26

    • SHA256

      8910ad23b09a097235cedf09448484d2167aa3f0134ba5c30a18223721c0abf5

    • SHA512

      ebf81583ff7fa0226239ea03653c4a35bf84cebffc6c367f190983fce7ce5b3dadc39e47c87e323248f71d67f81db3424ddf8f3760c3167188880b9d20aeac82

    • SSDEEP

      12582912:AxKcllijFwgj0DWQK2Uc3y0ySmkFZavCJxqPGOV:AAclliHjpI3FmH6jq+q

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks