Overview
overview
7Static
static
5Capitalism...ND.rar
windows10-ltsc_2021-x64
1Capitalism...to.otf
windows10-ltsc_2021-x64
7Capitalism...nt.txt
windows10-ltsc_2021-x64
1Capitalism...TD.pla
windows10-ltsc_2021-x64
3Capitalism...TD.plo
windows10-ltsc_2021-x64
3Capitalism...TD.set
windows10-ltsc_2021-x64
3Capitalism...LD.col
windows10-ltsc_2021-x64
3Capitalism...LD.icn
windows10-ltsc_2021-x64
3Capitalism...LU.col
windows10-ltsc_2021-x64
3Capitalism...LU.icn
windows10-ltsc_2021-x64
3Capitalism...RD.col
windows10-ltsc_2021-x64
3Capitalism...RD.icn
windows10-ltsc_2021-x64
3Capitalism...RU.col
windows10-ltsc_2021-x64
3Capitalism...RU.icn
windows10-ltsc_2021-x64
3Capitalism...AR.col
windows10-ltsc_2021-x64
3Capitalism...AR.icn
windows10-ltsc_2021-x64
3Capitalism...ry.png
windows10-ltsc_2021-x64
1Capitalism...ot.png
windows10-ltsc_2021-x64
1Capitalism..._D.col
windows10-ltsc_2021-x64
3Capitalism..._D.icn
windows10-ltsc_2021-x64
3Capitalism..._U.col
windows10-ltsc_2021-x64
3Capitalism..._U.icn
windows10-ltsc_2021-x64
3Capitalism...IN.col
windows10-ltsc_2021-x64
3Capitalism...IN.icn
windows10-ltsc_2021-x64
3Capitalism..._D.col
windows10-ltsc_2021-x64
3Capitalism..._D.icn
windows10-ltsc_2021-x64
3Capitalism..._U.col
windows10-ltsc_2021-x64
3Capitalism..._U.icn
windows10-ltsc_2021-x64
3Capitalism...DD.col
windows10-ltsc_2021-x64
3Capitalism...DD.icn
windows10-ltsc_2021-x64
3Capitalism...DU.col
windows10-ltsc_2021-x64
3Capitalism...DU.icn
windows10-ltsc_2021-x64
3Analysis
- max time kernel
898s - max time network
558s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
17/08/2026, 05:35
Static task
static1
Behavioral task
behavioral1
Sample
Capitalism.Lab.v10.0.50.iNTERNAL-iND.rar
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
Capitalism Lab/font/Noto.otf
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
Capitalism Lab/font/font.txt
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
Capitalism Lab/gameset/1STD.pla
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
Capitalism Lab/gameset/1STD.plo
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
Capitalism Lab/gameset/1STD.set
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
Capitalism Lab/if/ACAMP_LD.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral8
Sample
Capitalism Lab/if/ACAMP_LD.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral9
Sample
Capitalism Lab/if/ACAMP_LU.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral10
Sample
Capitalism Lab/if/ACAMP_LU.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral11
Sample
Capitalism Lab/if/ACAMP_RD.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral12
Sample
Capitalism Lab/if/ACAMP_RD.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral13
Sample
Capitalism Lab/if/ACAMP_RU.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral14
Sample
Capitalism Lab/if/ACAMP_RU.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral15
Sample
Capitalism Lab/if/ADV_BAR.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral16
Sample
Capitalism Lab/if/ADV_BAR.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral17
Sample
Capitalism Lab/if/AM_Factory.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral18
Sample
Capitalism Lab/if/AM_Slot.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral19
Sample
Capitalism Lab/if/ANEXT_D.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral20
Sample
Capitalism Lab/if/ANEXT_D.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral21
Sample
Capitalism Lab/if/ANEXT_U.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral22
Sample
Capitalism Lab/if/ANEXT_U.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral23
Sample
Capitalism Lab/if/APARTWIN.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral24
Sample
Capitalism Lab/if/APARTWIN.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral25
Sample
Capitalism Lab/if/APREV_D.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral26
Sample
Capitalism Lab/if/APREV_D.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral27
Sample
Capitalism Lab/if/APREV_U.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral28
Sample
Capitalism Lab/if/APREV_U.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral29
Sample
Capitalism Lab/if/ARROWDD.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral30
Sample
Capitalism Lab/if/ARROWDD.icn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral31
Sample
Capitalism Lab/if/ARROWDU.col
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral32
Sample
Capitalism Lab/if/ARROWDU.icn
Resource
win10ltsc2021-20260513-en
General
- Target Capitalism Lab/if/AM_Slot.png
- Size 4KB
- Sample260817-gaggxsteqd
- SHA256 d9e1693005010b347ae0d776f5dc393faa35287558fa904a79f2ac84069d5ec3
- MD5 67248ba85a0bf324361433dd4cecbd57
- SHA1 f68acdc51321f7ef46750dedff994e6a34fe6642
- SHA512 e966fd02e5d41f35ebd3c194a3929ed185beb83678eb96ddf195202bad977eb3b3e45983395068763e209228d74d720457342faadcf83c38ff6b6349b36aa9a0
- SSDEEP 96:mxssS72AoFjFHkVU5N17xgkpZmOBnpuGk:w8dEtkVUL1720ZmOpuGk
- TLSH T132917D0B7700D7C1E65F500835FA80239E678891CB98E05A8DDCA2556F101F90E70EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 812 mspaint.exe 812 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 812 mspaint.exe 812 mspaint.exe 812 mspaint.exe 812 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Capitalism Lab\if\AM_Slot.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:812
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:920