Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
6CapCut.zip
windows7-x64
1CapCut.zip
windows10-2004-x64
1Payload/Ca...API.js
windows7-x64
3Payload/Ca...API.js
windows10-2004-x64
3Payload/Ca...nfo.js
windows7-x64
3Payload/Ca...nfo.js
windows10-2004-x64
3Payload/Ca...dge.js
windows7-x64
3Payload/Ca...dge.js
windows10-2004-x64
3Payload/Ca...ore.js
windows7-x64
3Payload/Ca...ore.js
windows10-2004-x64
3Payload/Ca...-v1.js
windows7-x64
3Payload/Ca...-v1.js
windows10-2004-x64
3Payload/Ca...cation
macos-10.15-amd64
1Payload/Ca...ension
macos-10.15-amd64
1Payload/Ca...st.xml
windows7-x64
3Payload/Ca...st.xml
windows10-2004-x64
1Payload/Ca...trings
windows7-x64
3Payload/Ca...trings
windows10-2004-x64
3Payload/Ca....dylib
macos-10.15-amd64
1Payload/Ca...st.xml
windows7-x64
3Payload/Ca...st.xml
windows10-2004-x64
1Payload/Ca...trings
windows7-x64
3Payload/Ca...trings
windows10-2004-x64
3Payload/Ca...st.xml
windows7-x64
3Payload/Ca...st.xml
windows10-2004-x64
1Payload/Ca...trings
windows7-x64
3Payload/Ca...trings
windows10-2004-x64
3Payload/Ca...st.xml
windows7-x64
3Payload/Ca...st.xml
windows10-2004-x64
1Payload/Ca...trings
windows7-x64
3Payload/Ca...trings
windows10-2004-x64
3Payload/Ca...st.xml
windows7-x64
3Analysis
-
max time kernel
144s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2024, 19:30
Behavioral task
behavioral1
Sample
CapCut.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CapCut.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Payload/CapCut.app/LVWebView.bundle/LMWebViewAPI.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Payload/CapCut.app/LVWebView.bundle/LMWebViewAPI.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Payload/CapCut.app/LVWebView.bundle/LVWebShareInfo.js
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Payload/CapCut.app/LVWebView.bundle/LVWebShareInfo.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Payload/CapCut.app/LynxResources.bundle/lepus_bridge.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Payload/CapCut.app/LynxResources.bundle/lepus_bridge.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Payload/CapCut.app/LynxResources.bundle/lynx_core.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Payload/CapCut.app/LynxResources.bundle/lynx_core.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Payload/CapCut.app/PAGAdSDK.bundle/omsdk-v1.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Payload/CapCut.app/PAGAdSDK.bundle/omsdk-v1.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Payload/CapCut.app/PlugIns/AppNotification.appex/AppNotification
Resource
macos-20241101-en
Behavioral task
behavioral14
Sample
Payload/CapCut.app/PlugIns/ShareExtension.appex/ShareExtension
Resource
macos-20241106-en
Behavioral task
behavioral15
Sample
Payload/CapCut.app/ko.lproj/InfoPlist.xml
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Payload/CapCut.app/ko.lproj/InfoPlist.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Payload/CapCut.app/ko.lproj/LaunchScreen.strings
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Payload/CapCut.app/ko.lproj/LaunchScreen.strings
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Payload/CapCut.app/libsubstrate.dylib
Resource
macos-20241106-en
Behavioral task
behavioral20
Sample
Payload/CapCut.app/ms.lproj/InfoPlist.xml
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
Payload/CapCut.app/ms.lproj/InfoPlist.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
Payload/CapCut.app/ms.lproj/LaunchScreen.strings
Resource
win7-20241010-en
Behavioral task
behavioral23
Sample
Payload/CapCut.app/ms.lproj/LaunchScreen.strings
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
Payload/CapCut.app/pl.lproj/InfoPlist.xml
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
Payload/CapCut.app/pl.lproj/InfoPlist.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
Payload/CapCut.app/pl.lproj/LaunchScreen.strings
Resource
win7-20241023-en
Behavioral task
behavioral27
Sample
Payload/CapCut.app/pl.lproj/LaunchScreen.strings
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
Payload/CapCut.app/pt-BR.lproj/InfoPlist.xml
Resource
win7-20240708-en
Behavioral task
behavioral29
Sample
Payload/CapCut.app/pt-BR.lproj/InfoPlist.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
Payload/CapCut.app/pt-BR.lproj/LaunchScreen.strings
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
Payload/CapCut.app/pt-BR.lproj/LaunchScreen.strings
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
Payload/CapCut.app/ru.lproj/InfoPlist.xml
Resource
win7-20240903-en
General
-
Target
Payload/CapCut.app/pl.lproj/InfoPlist.xml
-
Size
1KB
-
MD5
148ba997b776f9d3be8f9785f1407672
-
SHA1
59f1bfc08740d78caaafe5fcadc7ecd0f26cbbeb
-
SHA256
9b96df2fe3fc8fc6db5e2822d6133834f3eaf541ca1e3a91587b63f67f1f748d
-
SHA512
ec98922994ac5bed2c4276c292dfc871629da6ef1c2fc0f43142a7a49ea42cde98d8249ffb2d363e3224c6a90a33e9ae382b0652f895227172d86c2851830b5f
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Payload\CapCut.app\pl.lproj\InfoPlist.xml"1⤵PID:3332