Overview

overview

6

Static

static

6

CapCut.zip

windows7-x64

1

CapCut.zip

windows10-2004-x64

1

Payload/Ca...API.js

windows7-x64

3

Payload/Ca...API.js

windows10-2004-x64

3

Payload/Ca...nfo.js

windows7-x64

3

Payload/Ca...nfo.js

windows10-2004-x64

3

Payload/Ca...dge.js

windows7-x64

3

Payload/Ca...dge.js

windows10-2004-x64

3

Payload/Ca...ore.js

windows7-x64

3

Payload/Ca...ore.js

windows10-2004-x64

3

Payload/Ca...-v1.js

windows7-x64

3

Payload/Ca...-v1.js

windows10-2004-x64

3

Payload/Ca...cation

macos-10.15-amd64

1

Payload/Ca...ension

macos-10.15-amd64

1

Payload/Ca...st.xml

windows7-x64

3

Payload/Ca...st.xml

windows10-2004-x64

1

Payload/Ca...trings

windows7-x64

3

Payload/Ca...trings

windows10-2004-x64

3

Payload/Ca....dylib

macos-10.15-amd64

1

Payload/Ca...st.xml

windows7-x64

3

Payload/Ca...st.xml

windows10-2004-x64

1

Payload/Ca...trings

windows7-x64

3

Payload/Ca...trings

windows10-2004-x64

3

Payload/Ca...st.xml

windows7-x64

3

Payload/Ca...st.xml

windows10-2004-x64

1

Payload/Ca...trings

windows7-x64

3

Payload/Ca...trings

windows10-2004-x64

3

Payload/Ca...st.xml

windows7-x64

3

Payload/Ca...st.xml

windows10-2004-x64

1

Payload/Ca...trings

windows7-x64

3

Payload/Ca...trings

windows10-2004-x64

3

Payload/Ca...st.xml

windows7-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CapCut.ipa

  • Size

    135.5MB

  • Sample

    241222-x7yqgaxkbp

  • MD5

    6e321ebba238492692fd68e3cd0e546b

  • SHA1

    c240b9c144629b7f5e86f6f9ffe0c0c764e2fd3a

  • SHA256

    5e9a3b7c09b846141c577674b503cd048a286467af96cb22039c3eb6044c581f

  • SHA512

    577ba6f5dbc7eff2ba9cc5eb19673cfb668af7d4ed18d7ec48b83469aed08565ccf3067ad94a2aae1ee52deb30220f09447bec4842f3435a64d89caf32fbf872

  • SSDEEP

    3145728:daGpsJ12+1ynnBj522dHUDvZ3zYGr8osEl9ZLwY0x+J9:bps2yABdpyR3psE5Lha+

Score
6/10
discoveryevasionexecutionmacospdf

Malware Config

Targets

    • Target

      CapCut.ipa

    • Size

      135.5MB

    • MD5

      6e321ebba238492692fd68e3cd0e546b

    • SHA1

      c240b9c144629b7f5e86f6f9ffe0c0c764e2fd3a

    • SHA256

      5e9a3b7c09b846141c577674b503cd048a286467af96cb22039c3eb6044c581f

    • SHA512

      577ba6f5dbc7eff2ba9cc5eb19673cfb668af7d4ed18d7ec48b83469aed08565ccf3067ad94a2aae1ee52deb30220f09447bec4842f3435a64d89caf32fbf872

    • SSDEEP

      3145728:daGpsJ12+1ynnBj522dHUDvZ3zYGr8osEl9ZLwY0x+J9:bps2yABdpyR3psE5Lha+

    Score
    1/10
    behavioral1behavioral2

    • Target

      Payload/CapCut.app/LVWebView.bundle/LMWebViewAPI.js

    • Size

      1KB

    • MD5

      cc555d2d0406fabadbc6cc6faba366dc

    • SHA1

      a18b935fb5f0285deddb84103ebf7b330b10a05a

    • SHA256

      917efb1445da35672f92d147e96f648b68f959457403971acd4559b2221dfd10

    • SHA512

      9f7765ffb80da8e3eddbf7dfeff6433033608952d7af8948a8700fed282aa3dd32110647147780793d4c2d2a8580c386af61fc588af0131705257f0f06e6511a

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      Payload/CapCut.app/LVWebView.bundle/LVWebShareInfo.js

    • Size

      1KB

    • MD5

      29fa667a13a3e3eea03536e1ed06c10e

    • SHA1

      f8e62db8e6d2d61cad2ae4ebd06cfbd984d46085

    • SHA256

      7ccff7e558223850c27ba815085db0ec6b4463a0d5e189fbba8514a86bdb3e36

    • SHA512

      fc891679352a5f5aff418ea8fc81a2dcad2b344985b3c323e74f4e18f73ced4126d549f7b3c71988e0d3019a38a0431262d7b76c7a4e6803a4a180bd8a693287

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      Payload/CapCut.app/LynxResources.bundle/lepus_bridge.js

    • Size

      45KB

    • MD5

      ab9b7b52bc4317d8002f08b53ce63838

    • SHA1

      ae86ccd042630254099a1b2650b39acbdb0aa9b2

    • SHA256

      b3ab1019a6fe862b97d227a0b9ca6bbd9c983a74a3a0fba6f66e4873ef2cf25f

    • SHA512

      f9d251129f7cf199b6a486628b33aba91d7bd050929758091da7069970aec4f9cd5f7812009d7334863b4b0248ecd8cabfd978ca5c17c8bbc23a9a59bd9a38ba

    • SSDEEP

      768:AxzHa1z8IvzWBy5krNjNiFDLpTCbonsVG2EdZHG4woS9J1qE9bWe28C+J8+8IVMZ:M4bWBkkrNRiBpTCbooMKoZUBk

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      Payload/CapCut.app/LynxResources.bundle/lynx_core.js

    • Size

      248KB

    • MD5

      3ee07b05f6c5d7bbb1a0d6818cfb70ee

    • SHA1

      2b7ceb092b144e70f6e3149c6caa43013e1d2b50

    • SHA256

      2371caf01c34f0545cdfb281a98316e394ace1e330de9bcd6f737e809b11564a

    • SHA512

      e30f0f50d66ab8d14e10ba495f2569cb59246416555304669dd6a532d2e4d68aa44ddc27a08c970f06ee6bbd66f42a6e48d78b585d4fd32d2af684ee0fdd5cca

    • SSDEEP

      3072:a6Pl2foyDwFcWL4z2Py2ZqUAS6s56r0SJxXXLNT:ZmoAlWEz2a2ZqhdrVbx

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      Payload/CapCut.app/PAGAdSDK.bundle/omsdk-v1.js

    • Size

      39KB

    • MD5

      7c34b7c3913eb13e26e540405321c473

    • SHA1

      c21e970bba874635fe1abec38cef07dd1e507a06

    • SHA256

      6a3826069bb80dacf9687f03681e94b7380b07ba6e626ee93c3492c30aaca676

    • SHA512

      40b56dcbce769cc782ce40113c5cd51f941bd4bc2c43c3a353b0ef5e747796ba14a298b41055c8f01aa07d55a8453d6d9ebf4d26a4ca47e07830684c8b792efa

    • SSDEEP

      768:X6kymXjv8DPXwfBKn3ySNiTTUpdpnoPq1KMIQ2/9vt5ZBFus9cAZhmUsaezqhKQZ:X6kPXzPs3v3noPq1KMIQ2/9vt5ZBF595

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      Payload/CapCut.app/PlugIns/AppNotification.appex/AppNotification

    • Size

      113KB

    • MD5

      1fc2151018823706bcabce73e42855c6

    • SHA1

      2a1a3576c0985c68fa95bda41ee42ebe897b7023

    • SHA256

      87943b1c67cf3466c00cbbf801b41cd0de32b66a420e6d57a181bd83a55250b8

    • SHA512

      a141e6370c9fa64112d28bbc0125ff9be13d98558e58e4ffa7e30636da75fa63c75a3834911510dbfba6455b40e40eca3221aad3d6c7d4e7d1c27f708dcfb31f

    • SSDEEP

      1536:2I7XgCtr4YYk2+C8Bs35xAZIJFGU4eY9wgzdQjvT1Z01o+9tZMF47thiumK47o/u:DD6eIPryb+5UljMs

    Score
    1/10
    behavioral13

    • Target

      Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension

    • Size

      171KB

    • MD5

      366d1dd0398fe8b93263a1c5de7552b5

    • SHA1

      45a541d93f1667b154d24f8f110b849b29ceb840

    • SHA256

      1c4d989771b7c4a5feeed016539d3d8a49e7b0d421f15c17954f49ae8d99fdf4

    • SHA512

      33b428a656e93e03f486dbb129318edd114ba30825cf16c55f05366c2dfb0779f9c941231e0935f0684cf30da72d70e90d534aafbe414a0faa01808af0f9b9cc

    • SSDEEP

      1536:pMhcxyUigUq9V7pzROEowIgs0CNoi0kldCI4zWyLDiELXSPyFJJUtDJiWJ8XJk+:p/pP7Zx4eh3wEZk7Z/OENpsRCNbZs

    Score
    1/10
    behavioral14

    • Target

      Payload/CapCut.app/ko.lproj/InfoPlist.strings

    • Size

      1KB

    • MD5

      796ab8598e4d384279eab2c7a8ada765

    • SHA1

      be1f7273f571ab282f851b5e33185d8c42442899

    • SHA256

      bc2f7a3743ee3f1af58f4ff8a7205bfc021d47c494f8b2f576de15f2d10d7410

    • SHA512

      48c7a34c35174857b07907b3c683b9fd0c2e586896198bbbc77dcba2f855489dbe7af5e3bbe006b82148650226068be39fb0326e775f265fe911f3bdb5a4aeb2

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      Payload/CapCut.app/ko.lproj/LaunchScreen.strings

    • Size

      1B

    • MD5

      68b329da9893e34099c7d8ad5cb9c940

    • SHA1

      adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

    • SHA256

      01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

    • SHA512

      be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      Payload/CapCut.app/libsubstrate.dylib

    • Size

      291KB

    • MD5

      533682af73d07094161e20d448f93077

    • SHA1

      bfd3e9a3985d57362dd098ded8612adb02eb07ac

    • SHA256

      1ef6bec1013e5c244f917b93d4f827ed0630e63a2fef9b855ab255cb3f01fc89

    • SHA512

      5aa8774c64c4bc9b1217b6472b13aa9fdd18a543a442467095646998d6024d0112c1dfc9b78ec1b345e91de99aafb64c7b67ba662dcbba427170226648790c47

    • SSDEEP

      1536:ZJinRNQeUcaaRv4xQjFKAumhRXjgZGjX/sj3ADz0OFjO:ZJinfQ/MRg+F4mhlsZUkT4oe

    Score
    1/10
    behavioral19

    • Target

      Payload/CapCut.app/ms.lproj/InfoPlist.strings

    • Size

      1KB

    • MD5

      152472fcdce95c08e811ffc80be48383

    • SHA1

      f99686ea8920317b0c5808740d5c13ed2a055a88

    • SHA256

      8354653e1c6e5ffd2927d612bdac1cb33e5bf7fce9fe1e545c574718e4c5785f

    • SHA512

      6a26458dd9321c14ed1365de4341c4a273ca8e0ee14a6a2dc421a534944a989951c82e55d4eb5881cb47f806fae5d803a0c80cc43682d94ab14ecae3a87d1697

    Score
    3/10
    discovery
    behavioral20behavioral21

    • Target

      Payload/CapCut.app/ms.lproj/LaunchScreen.strings

    • Size

      1B

    • MD5

      68b329da9893e34099c7d8ad5cb9c940

    • SHA1

      adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

    • SHA256

      01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

    • SHA512

      be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

    Score
    3/10
    discovery
    behavioral22behavioral23

    • Target

      Payload/CapCut.app/pl.lproj/InfoPlist.strings

    • Size

      1KB

    • MD5

      148ba997b776f9d3be8f9785f1407672

    • SHA1

      59f1bfc08740d78caaafe5fcadc7ecd0f26cbbeb

    • SHA256

      9b96df2fe3fc8fc6db5e2822d6133834f3eaf541ca1e3a91587b63f67f1f748d

    • SHA512

      ec98922994ac5bed2c4276c292dfc871629da6ef1c2fc0f43142a7a49ea42cde98d8249ffb2d363e3224c6a90a33e9ae382b0652f895227172d86c2851830b5f

    Score
    3/10
    discovery
    behavioral24behavioral25

    • Target

      Payload/CapCut.app/pl.lproj/LaunchScreen.strings

    • Size

      1B

    • MD5

      68b329da9893e34099c7d8ad5cb9c940

    • SHA1

      adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

    • SHA256

      01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

    • SHA512

      be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

    Score
    3/10
    discovery
    behavioral26behavioral27

    • Target

      Payload/CapCut.app/pt-BR.lproj/InfoPlist.strings

    • Size

      1KB

    • MD5

      d3f314b1926f882f39696410c07e3759

    • SHA1

      447c9b3822dabc3177f0a285457d9372e84da433

    • SHA256

      f8e5177bf7648b751fe3f94f11e398a682df96fd132f232ebcb3cbb10aa8032d

    • SHA512

      b655fabad3156f1d25181b7fd0d824f22ec3e07be2ec6d192594cc68088ac03866716be17c62e2402dd5b8f527daf6c8968647d10f60832e72ce072b51c47f7e

    Score
    3/10
    discovery
    behavioral28behavioral29

    • Target

      Payload/CapCut.app/pt-BR.lproj/LaunchScreen.strings

    • Size

      1B

    • MD5

      68b329da9893e34099c7d8ad5cb9c940

    • SHA1

      adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

    • SHA256

      01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

    • SHA512

      be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

    Score
    3/10
    discovery
    behavioral30behavioral31

    • Target

      Payload/CapCut.app/ru.lproj/InfoPlist.strings

    • Size

      2KB

    • MD5

      d40c63e1b3198bb15f19da5077f155fe

    • SHA1

      5a8afd83ca26d35318a32a4362c0801e26791e08

    • SHA256

      b5452aa57d2043e810c38fb09ae086dcf4de3c8a31f77ca8ca175901f642fd57

    • SHA512

      0d37b1387010481b62f45775f79c58cf26aa5d24439a07fc02b36a38b41fa6d3e61b57a77aa43016dddc2c423cc4362334597337c278904352c3ff8128585af7

    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

pdfevasion
Score
6/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

Score
1/10

behavioral17

discovery
Score
3/10

behavioral18

Score
3/10

behavioral19

Score
1/10

behavioral20

discovery
Score
3/10

behavioral21

Score
1/10

behavioral22

discovery
Score
3/10

behavioral23

Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

Score
1/10

behavioral26

discovery
Score
3/10

behavioral27

Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

Score
1/10

behavioral30

discovery
Score
3/10

behavioral31

Score
3/10

behavioral32

discovery
Score
3/10