General
-
Target
CapCut_1_5_1_245_capcutpc_0.exe
-
Size
389.6MB
-
Sample
230305-ms49lagc62
-
MD5
3f6e83001e8b00ffb3fe4a46a225a392
-
SHA1
8ea04d7a107c7e1e1800963b6b3679be38d9ad26
-
SHA256
8910ad23b09a097235cedf09448484d2167aa3f0134ba5c30a18223721c0abf5
-
SHA512
ebf81583ff7fa0226239ea03653c4a35bf84cebffc6c367f190983fce7ce5b3dadc39e47c87e323248f71d67f81db3424ddf8f3760c3167188880b9d20aeac82
-
SSDEEP
12582912:AxKcllijFwgj0DWQK2Uc3y0ySmkFZavCJxqPGOV:AAclliHjpI3FmH6jq+q
Static task
static1
Behavioral task
behavioral1
Sample
CapCut_1_5_1_245_capcutpc_0.exe
Resource
win10v2004-20230220-es
Malware Config
Targets
-
-
Target
CapCut_1_5_1_245_capcutpc_0.exe
-
Size
389.6MB
-
MD5
3f6e83001e8b00ffb3fe4a46a225a392
-
SHA1
8ea04d7a107c7e1e1800963b6b3679be38d9ad26
-
SHA256
8910ad23b09a097235cedf09448484d2167aa3f0134ba5c30a18223721c0abf5
-
SHA512
ebf81583ff7fa0226239ea03653c4a35bf84cebffc6c367f190983fce7ce5b3dadc39e47c87e323248f71d67f81db3424ddf8f3760c3167188880b9d20aeac82
-
SSDEEP
12582912:AxKcllijFwgj0DWQK2Uc3y0ySmkFZavCJxqPGOV:AAclliHjpI3FmH6jq+q
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-