Overview

overview

5

Static

static

3

capcut_cap...er.exe

windows10-2004-x64

5

capcut_cap...er.exe

windows11-ltsc_2024-x64

5

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ed.dll

windows10-2004-x64

3

$PLUGINSDI...ed.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    capcut_capcutpc_0_1.2.6_installer.exe
  • Size 2.2MB
  • Sample260804-eaz8xsce38
  • SHA256 4a9d815f284adda187982e2b24da2beaad860739bc4b4cb1cf26408e7c221dd6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
defense_evasiondiscoveryexecutiontrojan

Malware Config

Targets

    • Target
      capcut_capcutpc_0_1.2.6_installer.exe
    • Size 2.2MB
    • SHA256 4a9d815f284adda187982e2b24da2beaad860739bc4b4cb1cf26408e7c221dd6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    defense_evasiondiscoveryexecutiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/BgWorker.dll
    • Size 2KB
    • SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/deviceregister_shared.dll
    • Size 226KB
    • SHA256 7c2a74c4be8d524a121e78e763c05c7b5cb58b524119ac8897c493e717a1d42a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/downloader_nsis_plugin.dll
    • Size 1.2MB
    • SHA256 e28ff7b8fc4b1eb2d1f394ce15de2fc031cda58db645038c8c07581c31e79dda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/shell_downloader.dll
    • Size 2.3MB
    • SHA256 098972cf9ddc9d574130e025a252a99b278de9cc0ae700acfb8c935c24eb1172
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks