General
-
Target
capcut_capcutpc_invitefission_1.2.4_installer.exe
-
Size
2.2MB
-
Sample
240509-xljpescg58
-
MD5
cafd508f953e2d28acf9b49e80bf2fc6
-
SHA1
0c739749978ef0b6077261e511ab10e9211f2c71
-
SHA256
aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
-
SHA512
3ff026e849378691da40d406ce806c438c8a4f015217731bd132bfccdb58c4832306a3f92aa752af6d3ca71e2425f161155d767e56d23c15f0634424080caab3
-
SSDEEP
49152:7VhVn6EBMgmH1Cz0DqfMus8/V3sYPyD9+gqulxheyY6:7XVn6OMgmH1CS7ec7fxY6
Static task
static1
Behavioral task
behavioral1
Sample
capcut_capcutpc_invitefission_1.2.4_installer.exe
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20240426-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/deviceregister_shared.dll
Resource
win11-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/downloader_nsis_plugin.dll
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/shell_downloader.dll
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
capcut_capcutpc_invitefission_1.2.4_installer.exe
-
Size
2.2MB
-
MD5
cafd508f953e2d28acf9b49e80bf2fc6
-
SHA1
0c739749978ef0b6077261e511ab10e9211f2c71
-
SHA256
aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
-
SHA512
3ff026e849378691da40d406ce806c438c8a4f015217731bd132bfccdb58c4832306a3f92aa752af6d3ca71e2425f161155d767e56d23c15f0634424080caab3
-
SSDEEP
49152:7VhVn6EBMgmH1Cz0DqfMus8/V3sYPyD9+gqulxheyY6:7XVn6OMgmH1CS7ec7fxY6
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
-
-
Target
$PLUGINSDIR/BgWorker.dll
-
Size
2KB
-
MD5
33ec04738007e665059cf40bc0f0c22b
-
SHA1
4196759a922e333d9b17bda5369f14c33cd5e3bc
-
SHA256
50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
-
SHA512
2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/deviceregister_shared.dll
-
Size
226KB
-
MD5
8baaaeacb97679fb495e1c4f902f0a68
-
SHA1
29185b00e4c56ff8cc22de64c1407809d60348f1
-
SHA256
7c2a74c4be8d524a121e78e763c05c7b5cb58b524119ac8897c493e717a1d42a
-
SHA512
49f864332165c0229f0588fa1fd56fdc04bb005be1b61a9367fac5f45c32783e2e633c8acb64c3a921d41d9b79ceb3315813aa409a8f725cc7193958bf4bb8e0
-
SSDEEP
6144:5Nj2oPjbpV4hliZ7xsFARHtw+WY0L1TBWoBvF:6KV4hliZ7KFAb+L1TIo
Score1/10 -
-
-
Target
$PLUGINSDIR/downloader_nsis_plugin.dll
-
Size
1.2MB
-
MD5
14930a06cbfb26d5ffffd354fa12d5f8
-
SHA1
1de289bab03eaad965e419d657c3531a3738c558
-
SHA256
3ef7a13886328dafba1c49ec096da122e63839ac6965bf4f3d4dcce3a35ccc6d
-
SHA512
385268602f050c060795312c9cb86e979030a21b8cecc20303b346bbc0800a468a84a291224592d9b0e43458e579660b8062f6b9cba3b2e79aab5015d1dcc67b
-
SSDEEP
24576:eDe+j+n40zyob+w+LsoZttOWR7vDzAOdYKT9s6rNnb3Khz:Eei+n7zy2ULsGjOWR7vDzhdYKThNnzKN
Score3/10 -
-
-
Target
$PLUGINSDIR/shell_downloader.dll
-
Size
2.2MB
-
MD5
30c4aa9356d60d2039ed6bfb7850c4c1
-
SHA1
ef23c32dab6ed871527151932bbfe8b917d507af
-
SHA256
0c4abb66d9a69c80cfaa0eb3c988d4dc40d989843a87e95ed3cc6e75dae31559
-
SHA512
f425c9fcefd2ed55160d173b8e441f7867307fd006b0f01a655120ba150d87568ddc6266d36163267ce508df8147a97c16982093808c766051ca1e02ba9cc62b
-
SSDEEP
49152:6oiR6tzluS2KbICD13Nw2FiBLROWnhJV:6oiR+zDhbB19w+i1ROW
Score3/10 -