General
- Target Capcut pro activator.exe
- Size 2.9MB
- Sample260706-rrls3sb12n
- SHA256 11d250e58d81ef972b973ed2f483593fdcdfc2c212e316c867b7c75d2ae594c9
- MD5 e9f8fed1a5b02eb94ff3e0e6634fa9d9
- SHA1 bf6e394b365c3a1ee261b8053b05dc92df79a3df
- SHA512 8268f494dc6bbbdc05c2a15b8cd8955f842703445a71071fde1444405622a2e8ef11818ab3ac269d9f8ce20930bb2311a26f17d80d5f50aabe8f639231eef808
- SSDEEP 49152:OIVzZt+o/XEN9z6y9VLZkZuIzZoxwBske/rSNnxjErPZ/D0d:OIv7uZksICmNe/ONnNwod
- TLSH T193D59D0B7DE04AE9C4AAA33588B65192BB35FC090F3263D72E90B6782F72BD14D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Capcut pro activator.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Capcut pro activator.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Capcut pro activator.exe
- Size 2.9MB
- SHA256 11d250e58d81ef972b973ed2f483593fdcdfc2c212e316c867b7c75d2ae594c9
- MD5 e9f8fed1a5b02eb94ff3e0e6634fa9d9
- SHA1 bf6e394b365c3a1ee261b8053b05dc92df79a3df
- SHA512 8268f494dc6bbbdc05c2a15b8cd8955f842703445a71071fde1444405622a2e8ef11818ab3ac269d9f8ce20930bb2311a26f17d80d5f50aabe8f639231eef808
- SSDEEP 49152:OIVzZt+o/XEN9z6y9VLZkZuIzZoxwBske/rSNnxjErPZ/D0d:OIv7uZksICmNe/ONnNwod
- TLSH T193D59D0B7DE04AE9C4AAA33588B65192BB35FC090F3263D72E90B6782F72BD14D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger