Analysis
- max time kernel
152s - max time network
188s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 10:43
Static task
static1
Behavioral task
behavioral1
Sample
CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe
- Size 533.7MB
- Sample260919-mshetsec25
- SHA256 fdb3f29ef140025daa1d32167befd3c9eb2478760ec651715c8946d0ec730221
- MD5 834339aa5ac78e6c032756f6291d39a8
- SHA1 8511822b52ae0fe332b6bdbb4eb8a053b4046891
- SHA512 6ac81161cc7a70c2d50a04a712cf2c7a8462d05edbbea479cae6f1e18fbdded235a29b584bedd064577ebf23b1371e19493707904f1ad542b1676c3ff4b9456e
- SSDEEP 12582912:iFxBrqgHltrDcjRq2Oakec8pqxXxSeSdECWYFvkLCVgr4:ifBrNdAMec4qNxSeSdEytSr4
- TLSH T11F49332BB738416AD0B6D13DC553A606E5B0B88A83708BD722E55D5A3F27BF1AC3C711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 3788 CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe - Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3788 CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe 3788 CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3788 CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe"C:\Users\Admin\AppData\Local\Temp\CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe"1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3788
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\E9DDA433-AA83-40F3-BEA5-93BAD32DD698\7zip.dll
- Size 1.3MB
- SHA256 fba3a384172ad9c464edec06183f22a6fb6fe746e7fd7ca2cec248105e863995
- MD5 9d9bfb3513ea3dcf27b5cdddd1029d56
- SHA1 9353afb513c1bf9444b5176b8943b87f6a5575b9
- SHA512 6ac2fad5587677f28133f5d18809865b4c7dc07ed4262b3ff785ccd4e88b8ef57c55058c386edfdcef430781b007a76febb23e6e84ed67346bebca1d4f1f2cfe
- SSDEEP 24576:ryG0ZHLMzFsqPzNWvMaJj9KKeuJZ1EYgnrULIk37aJBWHZ5ERusNPu6uEtJP2GTV:YyLN3xu7aJKEM8lV2EH2ILuNZLlGb
- TLSH T142656C1BF67840A4D5E6C074C6276B1AD6B0788B8230A6DF06D85E6F3F13BF19979720
- MD5 SHA1 SHA512 SSDEEP TLSH