b1deaeabb4ff9d9d93ab5814f3ebb7fd5f05b1025e0a9689d47e497056042f89

Sharing

Copy URL Twitter E-mail

General

Target
Capitalism.Lab.v10.0.50.iNTERNAL-iND.rar
Size 706.5MB
Sample260817-gaggxsteqd
SHA256 b1deaeabb4ff9d9d93ab5814f3ebb7fd5f05b1025e0a9689d47e497056042f89
MD5 f41d393eeb6014904d0d15deeca2775e
SHA1 55c150edac8afe4366c471e72aca9055e11ccb82
SHA512 23e6aa9f151a20f67738db5be6a98c83829de03b3d8c5a956c7a3d3bebce18514ae2ae3f0eb14e187b606c5fa2049d33dbadb4e1be7bfcc076e7b21953e327ba
SSDEEP 12582912:KiB8ieh5m8c0mf8JWrjRj+64vkbI9qTizNklhRUtsUpxHiZckYd5iLsrvD9TsS:5vBZ8cRj+6Qp9qmNkxACZ1pLu9P
TLSH
T116793352E5EA04133C18281AB49ADDE50749E0C3DA71F5CF2BC69553A7E31EA73BC98C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  Capitalism.Lab.v10.0.50.iNTERNAL-iND.rar
- Size 706.5MB
- SHA256 b1deaeabb4ff9d9d93ab5814f3ebb7fd5f05b1025e0a9689d47e497056042f89
- MD5 f41d393eeb6014904d0d15deeca2775e
- SHA1 55c150edac8afe4366c471e72aca9055e11ccb82
- SHA512 23e6aa9f151a20f67738db5be6a98c83829de03b3d8c5a956c7a3d3bebce18514ae2ae3f0eb14e187b606c5fa2049d33dbadb4e1be7bfcc076e7b21953e327ba
- SSDEEP 12582912:KiB8ieh5m8c0mf8JWrjRj+64vkbI9qTizNklhRUtsUpxHiZckYd5iLsrvD9TsS:5vBZ8cRj+6Qp9qmNkxACZ1pLu9P
- TLSH
  T116793352E5EA04133C18281AB49ADDE50749E0C3DA71F5CF2BC69553A7E31EA73BC98C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Capitalism Lab/font/Noto.otf
- Size 5.4MB
- SHA256 81f39cffba8b45367a21249720782603b852bee71aad710f8f66fec3d3776af3
- MD5 485e33cfac6b276b665e47a08424e3e6
- SHA1 1456f6408f8e40158f1f4cdfa2ff263157da1834
- SHA512 c249bac1e2962c199472d576b49402f898b20a96ff8fb3104fd0457a6d9063a067d948879594fdd65091ee5f4a7e935362f54037e010bfa88fd9d74378d8af13
- SSDEEP 98304:cPOYAiuTsXgBpOm3NBa12mJ3VxceIDHYHHhBhDcrtGVQC4uzukQINdQXgJxZ5BR+:cPO0AsXCpV3NB6NdcdcPhDWtG6MzvdHS
- TLSH
  T1D24612BD69FC6818C9A7A1323642E53D289A180C989FF0F8E8475F7379D52341F6D782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral2
- Target
  Capitalism Lab/font/font.txt
- Size 15B
- SHA256 fc81f346d9a99b7c258caedd5a5caa41e56cf3670906df1c720bf027ba1e0bd1
- MD5 5d677604adccde241e86d3779e68d197
- SHA1 4ad51e943ea93779cea0c6325f8c12e934a0f07a
- SHA512 e8e74052cd475852cce23ae1063983720f192c3449138878b8b92863db5dd4427e0a4600c48373cca964d6075ef9bc93841af60ab9b8cfc7dbb879060e58475c
- MD5 SHA1 SHA512
Score

1^/10
behavioral3
- Target
  Capitalism Lab/gameset/1STD.PLA
- Size 56KB
- SHA256 0c008a05dbe153eb856a4dc23f015bcc6081fc6c1694d49d0e68c852f7ca01b7
- MD5 b6fcdc3b6f57f9e14ed9dbd142c0afb1
- SHA1 87b10b67dfe66b511736ed436baf61be931612b1
- SHA512 1db9108ab7f8663f09f109aeb36cf675872f9f368f3c5fe38cb2c488dfebb4f72629d1f638632f9e9ccab5b445f20bf171fe949bb1b0af21c650a3756cc65dd7
- SSDEEP 192:0pL7NLXYCgI7EdmfyMGwWOaoMwO27EwQAIlrrcKHxGe0+0R/0b2suPSS9DQGFExn:0pL9Y3I7Edmfy1wWgUlmR3lSSp1axn
- TLSH
  T19443B0E4F2699DA6ED6161BE0A4DE30BE51B8C05329940EFB6C4ADBE1913634CF707D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Capitalism Lab/gameset/1STD.PLO
- Size 56KB
- SHA256 0c008a05dbe153eb856a4dc23f015bcc6081fc6c1694d49d0e68c852f7ca01b7
- MD5 b6fcdc3b6f57f9e14ed9dbd142c0afb1
- SHA1 87b10b67dfe66b511736ed436baf61be931612b1
- SHA512 1db9108ab7f8663f09f109aeb36cf675872f9f368f3c5fe38cb2c488dfebb4f72629d1f638632f9e9ccab5b445f20bf171fe949bb1b0af21c650a3756cc65dd7
- SSDEEP 192:0pL7NLXYCgI7EdmfyMGwWOaoMwO27EwQAIlrrcKHxGe0+0R/0b2suPSS9DQGFExn:0pL9Y3I7Edmfy1wWgUlmR3lSSp1axn
- TLSH
  T19443B0E4F2699DA6ED6161BE0A4DE30BE51B8C05329940EFB6C4ADBE1913634CF707D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Capitalism Lab/gameset/1STD.SET
- Size 144KB
- SHA256 421a5989589d7f63072c82a72ba60dbe38ffe2e14fea7a32c8d001d122a7ee25
- MD5 aeb451e5c3ba1cd5ca05b18fce97142a
- SHA1 8195d2dc84a55f2423fca4b4b893e8185bba1d9b
- SHA512 2f324e5dd5b8d2466c16fe0273c00688c1977f6e3d76a5e6708971bdd6d78c7e9c9359d709a83986b6857dbad28902984615237e4b1705a953b0516d77ce9c81
- SSDEEP 1536:HYKvTmnadqK4eb9FWjOTJt3viqP6lv/7Xey9aLzdlR1Ms:qeb9FWCTJt/7PlsaL7b
- TLSH
  T174E3B5A36B0109A8EB5EC27121D2BB4774ECB2E5BF432546309E57C417B3740AFDE962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Capitalism Lab/if/ACAMP_LD.COL
- Size 776B
- SHA256 a5fc391a1acc34b19bd1367162e57e6b9248b60925d7db8c84dcb2e6892aa3f9
- MD5 3ff7595081487fd84c67839c6204d8db
- SHA1 ef1e2c4928dc1474dbab59c43d27f19a00c7573c
- SHA512 40afb6272cc882e04dab4df3a8d0a1c7422e84bf69eac8221fb1dd14b143a1c55ab629c90fa47497a6f856c6f4212bc2b11e26eb8fa0362e130169c72aacefcb
- TLSH
  T12501FE2169E0D908E6F825B54F243A00955DC06120A19510773C12E6ABAAB03E1EAFFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  Capitalism Lab/if/ACAMP_LD.ICN
- Size 845B
- SHA256 125f64f487d05cb8a0c674df61e5aa6ee4f0e6277723d40904d9720cbac28781
- MD5 d1a9b41683a353d87eb7cb19dce671a8
- SHA1 8b062dcb796bcd7ce394b7530cf1873820b10037
- SHA512 ebe5f101d33deee5f8be56cad9428776daafadcc44c1972200db3bc9ade4e270bd4e747ceae52bbfd80986e139e2a70f479d729f1250d82b9148a59353af612f
- TLSH
  T1B90175F62FA054D3E55A0271157F5E1811CF566423291CC005E0A10C3FF13DD8C682DC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  Capitalism Lab/if/ACAMP_LU.COL
- Size 776B
- SHA256 8069d5008a95882e10c35116067eff6bf5fe2b65e2270ae9e4093bd8595e1966
- MD5 5230a516612f3bb1877aece1090a9462
- SHA1 a20143d6d08755fd7848ef7640d1484f04705fc4
- SHA512 03143ee953eb27f61da9e70e89b9635f58ad9c4c05e627a565fdba5c5143ecba33a6341973bc02aa2f76a8a80e384936cff7f8c6f14a79a66b94c4cafb1952fc
- TLSH
  T19C01FE0EA4A08108DDF0A074CE1415155ABB9B8200306306F2BD22F34A12C53F562EFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  Capitalism Lab/if/ACAMP_LU.ICN
- Size 845B
- SHA256 e1676f1f5b7cda53a6ea247fe6e674c758f3cc65b95fabd78134e61317667374
- MD5 4e8a14ed6151df697d99896f1f3f6c80
- SHA1 acd1d26b977203b4bb49d86a8d85a18ffb4b7504
- SHA512 53ee996ce46b09f1fb6cc0080d2088e4820750258e6550114bf0dbd5e48bcce9f4bebb382dcf7a186295ecea5992699666f2acbd9d3744e4cd81f90f20cbf647
- TLSH
  T12A0186F91751DF19C0416170114A900CB4DE3DE929A08C576EA43BDEB94471CF854E0A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  Capitalism Lab/if/ACAMP_RD.COL
- Size 776B
- SHA256 f4fe4498bad0424db53fe38efcbcf953fa73d9cf6cdc480ac490a1295d0080d7
- MD5 f2bf1ce423280c1f4342cde98101bc12
- SHA1 7472640e8e34642cdac78979a90ff0c1e267a6cf
- SHA512 d80af1743756f34ecd369c1d06a22344eb4cc378c4e4f9117937228c09a778afd5fad4626d9f2e51c2555981cadfab8fd919ea6d7816919d14165a276b47b772
- TLSH
  T1E201286F74D5F208DBF4B07141011D353496143A30326382747C43D651F760FD1A54EE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  Capitalism Lab/if/ACAMP_RD.ICN
- Size 845B
- SHA256 bb8117794d9969f19758875cbc6b290cfe55e26d596c7cdb2b9e3362f962e71a
- MD5 3c8452374f0c2ce4bfb497832c0c2168
- SHA1 7310fbeab95429745177e0276c1c92171ef49e35
- SHA512 b1952a9bb0cc6c0a372cc3114d4aa3ef4f5e0016b43198a2064b565984cef37d6d964e0a32fc1e177d04f1a26093f331876a69928cd28223dbeebccd2901e49b
- TLSH
  T15B01868C894D6115DE0CD6338B154CC72F0A18C4155E87202D806135AFBA786F7AEEF3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  Capitalism Lab/if/ACAMP_RU.COL
- Size 776B
- SHA256 20d954936744c04a6b573926198c20ed294739b3b14eab646c29ce6547d2be7a
- MD5 3ca80e5ae46c9a792b2b75350046b917
- SHA1 ca8cb09918874fd295ba8b5a930578ddf6d52d2a
- SHA512 a452a104f078bd679ad998ffcef641f075858f5667c1f6c5a9d1895a1dce1865c3674dbc6cc7280845de99931f404f579230320ea192865259cae9f5376ac22e
- TLSH
  T14101884FBDC4610CFAF9F4FD45315E243A855017203282122D7D4BC3E097791A41A4EF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  Capitalism Lab/if/ACAMP_RU.ICN
- Size 845B
- SHA256 5ec02b8deefe91f446106ef36ca910234a622fcb4e6806bce5ed47007bd6101e
- MD5 c84aa4f6cf646766b5491e637aed396f
- SHA1 6fe18079c5ffa263cd85a130f92e5c2fcc1aa951
- SHA512 bbd67aa46be28a06e781b433c748a4fd0ef1207451bd7c082861a5d49ab5434d3c35878faf143dc8251e5f6fb2c7a66bd973969c8baca795f44ac263fc6cf73c
- TLSH
  T1B60181C105279D51C8DECCB790CC80C0120A9080AF304ADA2FB0A2528837DA822ABFEB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  Capitalism Lab/if/ADV_BAR.COL
- Size 776B
- SHA256 fd3df79a1a7c4d7ae7e3971dbd7140673955402c4b9d572d3d435124003946ee
- MD5 15a0e264ce17e11713c6cea73f67c236
- SHA1 385cc326e59f6c5537eee8a86f0d94bc5757df74
- SHA512 542be2313f5b7c0a8d865dd5338b577a2f5e140347c6074c1554dca67938d61dbc11e8b902024e941efc4534f0ecd9ac569c2564d80a821c6941e6aa4b8857bf
- TLSH
  T19901F46D32521904CD7BF7B4DD218C966C14D7F2E3B62A0BEC577469C3F400555282E0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  Capitalism Lab/if/ADV_BAR.ICN
- Size 2KB
- SHA256 78e5c4b73e8eed38edb3653facbebec0feede5599e3307bcab6bdc24262f79c4
- MD5 ee64882f19701ed716861475b7e60cfb
- SHA1 215e646d30590cf66bef83bc091a4ab91b816ce6
- SHA512 54b287d302be9bbb5b003411cc8e97b8be40f588adf021554173572e5abee01f364a84a6fd1a4afb77b20c6d0cd3f7f02b33561e5764299f893fe386b4de692e
- TLSH
  T14E5134820453FC1FC1DC9E38E205C382A0E3031418334AC03C4CEB1C338F452A454F11
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  Capitalism Lab/if/AM_Factory.png
- Size 67KB
- SHA256 cbaa4698bdfa4b00b7f98073301bdc081fe753dee3e8a2ee991bed960b81945d
- MD5 f524b1ef63ca34308552533a4e972c13
- SHA1 d1ba0f35e342b3e4c9eb93a5d0a4ed57160c4aea
- SHA512 c45c6b392ca1935594b78b4702998966ceab2f81985cb83513c468a2fb9b7e45936585a1b02c0efdac2cef17357240087d3ebc087a52f214b8918a2c63880f81
- SSDEEP 1536:hVwb0maKM85qSpsq3dhQYSnns3g486JL9okvNszN9AecpD5fUwK+/:jJNKM8lb3HQu3g47JL9yN9eB58wK4
- TLSH
  T1C36302B97764197782E8632998FF5584D6F3F3D12021E21C1D48CC095A7802F7AE56F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Capitalism Lab/if/AM_Slot.png
- Size 4KB
- SHA256 d9e1693005010b347ae0d776f5dc393faa35287558fa904a79f2ac84069d5ec3
- MD5 67248ba85a0bf324361433dd4cecbd57
- SHA1 f68acdc51321f7ef46750dedff994e6a34fe6642
- SHA512 e966fd02e5d41f35ebd3c194a3929ed185beb83678eb96ddf195202bad977eb3b3e45983395068763e209228d74d720457342faadcf83c38ff6b6349b36aa9a0
- SSDEEP 96:mxssS72AoFjFHkVU5N17xgkpZmOBnpuGk:w8dEtkVUL1720ZmOpuGk
- TLSH
  T132917D0B7700D7C1E65F500835FA80239E678891CB98E05A8DDCA2556F101F90E70EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Capitalism Lab/if/ANEXT_D.COL
- Size 776B
- SHA256 c352c74c5975fb671bb68b647967e4b0b421620ec238096a270b8aedf377a0fe
- MD5 82501268fb05a80f76a128465fbb1fd7
- SHA1 a9b203b9d698bb8b054a213a5e8f311ca19b50b9
- SHA512 39f16432ef3921c1474e650fb4de68b2e1ddd11bfe3429cd6cc9c9b14d1a83eefce27771853328492b8a73f8741ef63a192e085a78c30d079a7a9cd79fc891c9
- TLSH
  T1330188C675B1AF1DD4533DB68324193459F5848080F75C93DA65A3F664F44600F7B5C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  Capitalism Lab/if/ANEXT_D.ICN
- Size 733B
- SHA256 64cc08c0c44d8705bb2d87618cefcdfcfc27815ab2560260f4c0cb11bdd05977
- MD5 16436a55ea512041c6bd6960bccab43a
- SHA1 72cc377600e9576d09c3a9f4c1505f4103bd94bd
- SHA512 29d28d8816059061a3a72c0676bf92ffe89efc0e19004cc2df93967d9d44508a61e1ea96783db07f2720e5fccf1f77e0d41a8c6bbfcad56af3f98a3f0a09277e
- TLSH
  T15F01838543A8072A89430580ACF3ACDBEEE5EF8D0A8E26809899B09841BB14DC00322A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  Capitalism Lab/if/ANEXT_U.COL
- Size 776B
- SHA256 f6399688327097b7352f72ad8cb080dba709fcfd5af8c1aa8b9164bc55c92a60
- MD5 466b678e85ab9d9711aeb72b24538d70
- SHA1 af2d8cd870b2b15a99f39fd7d37b439fd43c3c1f
- SHA512 80c905e4a361297e64eee5a79c6795e5320d9d305836f34b21309bbac62bb3c3d476648eaf6d7bf17cbdae88386036214ddf7a01ab9416dad38842e03f82593a
- TLSH
  T18C01449BF13352A4F0114DF5C521847228E78CA8E151D0D7B9DFF0DD99020140A5A391
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  Capitalism Lab/if/ANEXT_U.ICN
- Size 733B
- SHA256 6bd10f9ea0c3dfd53392bc82eeae008517d0fe37ef47087e158d59e492f9e298
- MD5 7d9a529426ef04be507af9eb701f51d3
- SHA1 08794657e36bc2c41427b0bade434c341d4c5b4a
- SHA512 21ef0edf4b77e4cc0a0a01b7ac19cc5eb4986cc237f3ebcac0263fce3bcd757da6c3b762090573a0fdfec4a6d5d3ecb1e2426a64744bd7e2b8297c7005503efa
- TLSH
  T13A01FED0D02EFE40066465E792D2495DD5A94E48560BB0CE1D1038864EB31E475B9E2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  Capitalism Lab/if/APARTWIN.COL
- Size 776B
- SHA256 a83ea0216f66e4cc91f11cc5af63cc7eac7543d17abecfdcf3bcf14be2037a9e
- MD5 a8a6b620aeedb30b6e8bca354a332abf
- SHA1 caa6790f944c4c437609f5761b8c79cd5d94cc61
- SHA512 a744cea3c4a84fec7f024f66532549cb69810ec898831c909c25725001fa8bda25479cf93143882156f093efffd22a71254a5d9632a6e94792da590a6688ff80
- TLSH
  T1B401658948846411DD2582788E88CDEB2A3B3696E417262EB4F6AD48EB14F6A409A089
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  Capitalism Lab/if/APARTWIN.ICN
- Size 253KB
- SHA256 7f7504a71ae11efb509087c65e352b054947192a2d16fbffb5908544503c6afb
- MD5 36b8c00d7ac515d40ff671249263d116
- SHA1 4c773afbc59971d420ffc2d25c5aad2dedc99c75
- SHA512 1bdcc05aeac682a84282cedf54af2cee3f5989a773edad6f9e44cdec343fb99cb4cfae26e7ad06942e389e8f31f1d537b820cd21428cb7606a5a0bf4f6da8cbf
- SSDEEP 48:tP3+yWKNgxMeub/wm7khLEFrEdl239wab0Ib:tP3+jZM/7ktdl2tFbpb
- TLSH
  T18B442DFCDC23A8A8D9DEF23B14060784C6829F54FE88512E6164F6E1ADB7F91099C375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Capitalism Lab/if/APREV_D.COL
- Size 776B
- SHA256 87ebaeb72718add6cacf5141f2ca307ef440fe71273626faa5b472042561f2ee
- MD5 636116e8628bcefba9209ed01d2390fb
- SHA1 cd36dcf4258bd27777771df3c151b7ab35b791c7
- SHA512 7a2e2018d5d172e2819942ebd5c1241a832359684217890ec7b290c305aa75298dd614f08def97143cfbb982de4b0045c2145fd8ddcf29455e7a4e8bbb831f61
- TLSH
  T1E501284AB1D5DD8FD157B6FBC7505630208859B6A2E764C874DD60FD0B42C220478100
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  Capitalism Lab/if/APREV_D.ICN
- Size 733B
- SHA256 d6f6adbc8f99dac60dc07e9b2ad548ded9866a6faaca23cd926e66ec6992edc9
- MD5 7910451f38bf67d83e6717cfa498fa74
- SHA1 9c949dbcd069e272e6e197e75b6732b9a52f6013
- SHA512 0e76dcbe9825109115748eb9fd3b8bcd0b1048455bf958f58517ceb5d61480189bdae105d230754fd93625f37037d1db42ff27bb9ed22dfac335582f7e5c79c7
- TLSH
  T1E50183693361CD45E3E6EA85C70979A09CD68C300E723679AB0732944FB936C8C570EE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  Capitalism Lab/if/APREV_U.COL
- Size 776B
- SHA256 50c9bf4b364193fcb5c4b704b6e27143237906202584284aff387de8782a8ff7
- MD5 f4d02f4db7009d3fac85145b9fb901ed
- SHA1 92b0eca3aedc0c23396953e53403f82e4dfbe457
- SHA512 29338745af87d23720c1f0b2dcf2e2f4684a38e5ae17905d3f1b64336ecb294cb9ee813f87929bae1880b5a1bfec69de10ef8eef367a6ec9fcda16a6b0704a70
- TLSH
  T1C5014400F060680BD4133233503484314AD19CA560FDC9E46793F0F895C28B4946A8C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  Capitalism Lab/if/APREV_U.ICN
- Size 733B
- SHA256 184af304ce0cb24e978b822a454d3c6a258d661e77009fd22dec1a11512f229e
- MD5 158a08fac64a08060d615844f191aeda
- SHA1 ddde896b7895d872e8233b9b720d47a102ef696d
- SHA512 717d45885260df7ab6e25f3ad303eacf639ddb54a9147ea944a15070cccfac5b8f46d1d706d152eef4f2c0ada5fa4db3864e7967f7e79a9503d970560ea67ec7
- TLSH
  T1D801FE781AC1A97DA8E5A33A559D94E49ACCAFAA0056D3F54E02348D66B9810290CD42
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  Capitalism Lab/if/ARROWDD.COL
- Size 776B
- SHA256 36a1b824f67250b954f05d4b165b786dce7bb196290e5907c777f71bc2f6c91e
- MD5 088e640289a876221090459db9fd65a8
- SHA1 f4f5408b4b8f3df4b6e3445227e8daf32611b2a7
- SHA512 9f57f0146cf98197d7c7354f1f641851abd0e62272aeecc73d7f0095aed5ddb79e08682bde5e42f96b5714ea9eb5b727125ae1653ce6662c504d50618c220db6
- TLSH
  T19F012BF4B6532B22E97EB8F2319172580BA8691340D7375E9E3FF41E7D115820EED484
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  Capitalism Lab/if/ARROWDD.ICN
- Size 555B
- SHA256 922a731fa1faad8aeab4953cf342f6ddd88f4eea8b4ddd84f6f8f4896eb31aeb
- MD5 c16745c3d6d14e56001c0069bbb8bf62
- SHA1 e1d31c56025d5485aeff09167b879d0be0e0a06f
- SHA512 0ee0f12f15158c3208230cadeaf32939ffd3a4f7489aac284e3c149790d7eb9aa92b9caea365e186e2f0158370adbbc034113fd972dd482dc63eb625c0586393
- TLSH
  T1FCF022038B2391134AE827125078818D9E6D5E02227214A0BCBD796D267E86DAF29E31
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  Capitalism Lab/if/ARROWDU.COL
- Size 776B
- SHA256 da1c7964286e3d03c305ed73c32e003fe63dbc702bae44d7a5dfd32858f49c14
- MD5 046f429ba399a31d75a43e12fb9f754c
- SHA1 6f9657f7ed6cdf446856e7a02fdb1b2fbf943275
- SHA512 25357af5650640a9494f9e834db097ab32c26775b985fe247082211de125709011b08f7d5c53466d1932853229d91823955c0126befedde2bb5b4449b76b4d8a
- TLSH
  T18F01F9F0E6933B32F57AB9F1309272A917DC250700E7375E6D2EF81D3E115810CAA098
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  Capitalism Lab/if/ARROWDU.ICN
- Size 555B
- SHA256 5a59e650e0bfe6023ad6ab1056c7ff4e553968e93b79bbba376ff91e4d6b5efd
- MD5 28cdf05872ae4ba7ffb99d9293138aa0
- SHA1 58d3ececf74960568d9861fd1f691383165c694d
- SHA512 ba3e93a382bbe79e8843f352161469c7e46158c7f7b4e060d15ea1084f50f3b0e6974cdd7729184fc566eedc91a7d3cf8135ca64de06388c42cef2b8c892f3ef
- TLSH
  T133F0616E9E459013896C09054C7A26C0453D4FB42042A3FE3D903F489F3E3058683F04
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32