Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

CAPITAT SC...2..exe

windows7-x64

7

CAPITAT SC...2..exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CAPITATSC2025-2..tar.001.tar

  • Size

    1.3MB

  • Sample

    250325-xwb3bsvkt3

  • MD5

    a24d6409b739d1e6fa063989f0fd4e97

  • SHA1

    a8188fbd6a5160818600a689b6f15a7da7da26a3

  • SHA256

    9d027e9e3f90022748a0b2fba35784ebc87a8d1cce329aec74677dfc4297d163

  • SHA512

    8e8a41df1b8d7c8763d693b0dfa2d0d69813ea7897ff1849b1da1c834159423937557e00245fe2d8fb348f946b67add4ae4b3f2f2664d5a5b0d2c52f1dce51a2

  • SSDEEP

    24576:eigUXrbkXJvAU6GK+iqL0TiyIJeppSGx8YR/REoF:dW5vAPFc+iXHGxrrEoF

Score
10/10
vipkeyloggercollectiondiscoverykeyloggerstealer

Malware Config

Extracted

Family

vipkeylogger

Credentials

Targets

    • Target

      CAPITAT SC 2025-2..exe

    • Size

      1.3MB

    • MD5

      acef70ec8ea3cdae725c421e22d4def1

    • SHA1

      014276631452de17d302a315d6353f58af42a5eb

    • SHA256

      841f58752bc745d62a108bff362df80ca7694a612843de53f8fe4b228089e9da

    • SHA512

      23c7fe41a29476f14bf786e5e6c35e631570bbf7d6a50509d6bb1cd1d42f4f5dce7abb1f584ac18dd7d800ac91957a0344de13af1b5ab81220c2086645b3b271

    • SSDEEP

      24576:iigUXrbkXJvAU6GK+iqL0TiyIJeppSGx8YR/REoF+:5W5vAPFc+iXHGxrrEoF+

    Score
    10/10
    discoveryvipkeyloggercollectionkeyloggerstealer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

      stealerkeyloggervipkeylogger

    • Vipkeylogger family

      vipkeylogger

    • Drops startup file

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks