Analysis
- user interaction
yes - max time kernel
152s - max time network
179s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 00:49
Static task
static1
Behavioral task
behavioral1
Sample
CapCut_8_5_0_3590_capcutpc_0_creatortool.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
CapCut_8_5_0_3590_capcutpc_0_creatortool.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target CapCut_8_5_0_3590_capcutpc_0_creatortool.exe
- Size 569.0MB
- Sample260804-a6vabsac97
- SHA256 0c1be1820f4363d9cbb739b832a90282a2608f56903177d40ddfd94fbd87c53c
- MD5 b1fbf67ac1299f473b71386d9e234f2f
- SHA1 d41d234984cfa57fa421ed9a03cf47a2681380df
- SHA512 5bde8baeeb8ef155267cfc7f7feef22d924575100d04d078fbb9d098c1510ebb453abfe4b205fb97d72dd620dc8293c60ed8ccc9304889a75270998e5ed745f9
- SSDEEP 12582912:xExBjE/mLs6csLAIcE9lPaTXpPFH/1HknW0ykWA6G4Gmel7o7gc:xGBjEOWsAE6lZfG4a7o7gc
- TLSH T12F59331AB2784094E1E3D0349911AB1BEAB2BC42932047DF15D5BFA62F73BE1EE35711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 4544 CapCut_8_5_0_3590_capcutpc_0_creatortool.exe - Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA CapCut_8_5_0_3590_capcutpc_0_creatortool.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4544 CapCut_8_5_0_3590_capcutpc_0_creatortool.exe 4544 CapCut_8_5_0_3590_capcutpc_0_creatortool.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4544 CapCut_8_5_0_3590_capcutpc_0_creatortool.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\CapCut_8_5_0_3590_capcutpc_0_creatortool.exe"C:\Users\Admin\AppData\Local\Temp\CapCut_8_5_0_3590_capcutpc_0_creatortool.exe"1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4544
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\E9DDA433-AA83-40F3-BEA5-93BAD32DD698\7zip.dll
- Size 1.3MB
- SHA256 fba3a384172ad9c464edec06183f22a6fb6fe746e7fd7ca2cec248105e863995
- MD5 9d9bfb3513ea3dcf27b5cdddd1029d56
- SHA1 9353afb513c1bf9444b5176b8943b87f6a5575b9
- SHA512 6ac2fad5587677f28133f5d18809865b4c7dc07ed4262b3ff785ccd4e88b8ef57c55058c386edfdcef430781b007a76febb23e6e84ed67346bebca1d4f1f2cfe
- SSDEEP 24576:ryG0ZHLMzFsqPzNWvMaJj9KKeuJZ1EYgnrULIk37aJBWHZ5ERusNPu6uEtJP2GTV:YyLN3xu7aJKEM8lV2EH2ILuNZLlGb
- TLSH T142656C1BF67840A4D5E6C074C6276B1AD6B0788B8230A6DF06D85E6F3F13BF19979720
- MD5 SHA1 SHA512 SSDEEP TLSH