aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142

Sharing

Copy URL Twitter E-mail

General

Target
capcut_capcutpc_invitefission_1.2.4_installer.exe
Size 2.2MB
Sample240602-2ekqcsae24
SHA256 aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
MD5 cafd508f953e2d28acf9b49e80bf2fc6
SHA1 0c739749978ef0b6077261e511ab10e9211f2c71
SHA512 3ff026e849378691da40d406ce806c438c8a4f015217731bd132bfccdb58c4832306a3f92aa752af6d3ca71e2425f161155d767e56d23c15f0634424080caab3
SSDEEP 49152:7VhVn6EBMgmH1Cz0DqfMus8/V3sYPyD9+gqulxheyY6:7XVn6OMgmH1CS7ec7fxY6
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

discovery

Malware Config

Targets

- Target
  capcut_capcutpc_invitefission_1.2.4_installer.exe
- Size 2.2MB
- SHA256 aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
- MD5 cafd508f953e2d28acf9b49e80bf2fc6
- SHA1 0c739749978ef0b6077261e511ab10e9211f2c71
- SHA512 3ff026e849378691da40d406ce806c438c8a4f015217731bd132bfccdb58c4832306a3f92aa752af6d3ca71e2425f161155d767e56d23c15f0634424080caab3
- SSDEEP 49152:7VhVn6EBMgmH1Cz0DqfMus8/V3sYPyD9+gqulxheyY6:7XVn6OMgmH1CS7ec7fxY6
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10

discovery
- Suspicious use of NtCreateThreadExHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/deviceregister_shared.dll
- Size 226KB
- SHA256 7c2a74c4be8d524a121e78e763c05c7b5cb58b524119ac8897c493e717a1d42a
- MD5 8baaaeacb97679fb495e1c4f902f0a68
- SHA1 29185b00e4c56ff8cc22de64c1407809d60348f1
- SHA512 49f864332165c0229f0588fa1fd56fdc04bb005be1b61a9367fac5f45c32783e2e633c8acb64c3a921d41d9b79ceb3315813aa409a8f725cc7193958bf4bb8e0
- SSDEEP 6144:5Nj2oPjbpV4hliZ7xsFARHtw+WY0L1TBWoBvF:6KV4hliZ7KFAb+L1TIo
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/downloader_nsis_plugin.dll
- Size 1.2MB
- SHA256 3ef7a13886328dafba1c49ec096da122e63839ac6965bf4f3d4dcce3a35ccc6d
- MD5 14930a06cbfb26d5ffffd354fa12d5f8
- SHA1 1de289bab03eaad965e419d657c3531a3738c558
- SHA512 385268602f050c060795312c9cb86e979030a21b8cecc20303b346bbc0800a468a84a291224592d9b0e43458e579660b8062f6b9cba3b2e79aab5015d1dcc67b
- SSDEEP 24576:eDe+j+n40zyob+w+LsoZttOWR7vDzAOdYKT9s6rNnb3Khz:Eei+n7zy2ULsGjOWR7vDzhdYKThNnzKN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/shell_downloader.dll
- Size 2.2MB
- SHA256 0c4abb66d9a69c80cfaa0eb3c988d4dc40d989843a87e95ed3cc6e75dae31559
- MD5 30c4aa9356d60d2039ed6bfb7850c4c1
- SHA1 ef23c32dab6ed871527151932bbfe8b917d507af
- SHA512 f425c9fcefd2ed55160d173b8e441f7867307fd006b0f01a655120ba150d87568ddc6266d36163267ce508df8147a97c16982093808c766051ca1e02ba9cc62b
- SSDEEP 49152:6oiR6tzluS2KbICD13Nw2FiBLROWnhJV:6oiR+zDhbB19w+i1ROW
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12