Overview
overview
3Static
static
34.1.0.1647...er.exe
windows7-x64
14.1.0.1647...er.exe
windows10-2004-x64
14.1.0.1647...de.dll
windows7-x64
14.1.0.1647...de.dll
windows10-2004-x64
14.1.0.1647...ua.exe
windows7-x64
14.1.0.1647...ua.exe
windows10-2004-x64
14.1.0.1647...nes.js
windows7-x64
34.1.0.1647...nes.js
windows10-2004-x64
34.1.0.1647...53.dll
windows7-x64
14.1.0.1647...53.dll
windows10-2004-x64
14.1.0.1647...fi.dll
windows7-x64
14.1.0.1647...fi.dll
windows10-2004-x64
14.1.0.1647...re.dll
windows7-x64
14.1.0.1647...re.dll
windows10-2004-x64
1CapCut_737...er.exe
windows7-x64
3CapCut_737...er.exe
windows10-2004-x64
3vcruntime140.dll
windows7-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140_1.dll
windows7-x64
1vcruntime140_1.dll
windows10-2004-x64
1Analysis
-
max time kernel
125s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11-09-2024 06:26
Static task
static1
Behavioral task
behavioral1
Sample
4.1.0.1647/CapCut_7376550521366298640_installer.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4.1.0.1647/CapCut_7376550521366298640_installer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
4.1.0.1647/lua/lua-tilde.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
4.1.0.1647/lua/lua-tilde.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
4.1.0.1647/lua/lua.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
4.1.0.1647/lua/lua.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
4.1.0.1647/lua/lua/lanes.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
4.1.0.1647/lua/lua/lanes.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
4.1.0.1647/lua/lua53.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
4.1.0.1647/lua/lua53.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
4.1.0.1647/lua/modules/ffi.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
4.1.0.1647/lua/modules/ffi.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral13
Sample
4.1.0.1647/lua/modules/lanes/core.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
4.1.0.1647/lua/modules/lanes/core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
CapCut_7376550521366298640_installer.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
CapCut_7376550521366298640_installer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
vcruntime140.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
vcruntime140.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
vcruntime140_1.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
vcruntime140_1.dll
Resource
win10v2004-20240802-en
General
-
Target
vcruntime140.dll
-
Size
87KB
-
MD5
23105a395b807d9335219958b4d0cec1
-
SHA1
fb60050d82e3bc1be3b10877b9355f5d48e04854
-
SHA256
61832990e364dca5bfa2c61d930f00acaae6d1aaa3130392403455ae9a1125a5
-
SHA512
ef91d19e632d0d146fa68d52beb04ffcb9b972079cd9c255f44ea5201637a8b00907ec8e3358c7b5cc37338470e29e43dbaec7ddc0562810b49ab2e8115cc805
-
SSDEEP
1536:fTSVLL1/VfZPtsO6nBy0r8Z3j5X7K0d4HIH8d2//zoXnf7toecbNCOAS7Z:fW/tB8n8F4i/LoXfeecbNCA
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140.dll,#11⤵PID:2588
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4104,i,9445584274764997943,12714240264001792460,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:81⤵PID:3708