b1deaeabb4ff9d9d93ab5814f3ebb7fd5f05b1025e0a9689d47e497056042f89

Sharing

Copy URL Twitter E-mail

General

Target
Capitalism.Lab.v10.0.50.iNTERNAL-iND.rar
Size 706.5MB
Sample260817-gr329avvg1
SHA256 b1deaeabb4ff9d9d93ab5814f3ebb7fd5f05b1025e0a9689d47e497056042f89
MD5 f41d393eeb6014904d0d15deeca2775e
SHA1 55c150edac8afe4366c471e72aca9055e11ccb82
SHA512 23e6aa9f151a20f67738db5be6a98c83829de03b3d8c5a956c7a3d3bebce18514ae2ae3f0eb14e187b606c5fa2049d33dbadb4e1be7bfcc076e7b21953e327ba
SSDEEP 12582912:KiB8ieh5m8c0mf8JWrjRj+64vkbI9qTizNklhRUtsUpxHiZckYd5iLsrvD9TsS:5vBZ8cRj+6Qp9qmNkxACZ1pLu9P
TLSH
T116793352E5EA04133C18281AB49ADDE50749E0C3DA71F5CF2BC69553A7E31EA73BC98C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Capitalism Lab/CapMain.exe
- Size 4.6MB
- SHA256 5ba564238840f4b538201c811f19457b4549201dbc6dfe650d767955c42d30b8
- MD5 b739f787be97691835a90dfa34279974
- SHA1 2ad4f9338272983eb4e821e2ab342be00450ea62
- SHA512 bbbdc6ebed83d154da32015445e68f8408fead76ad57e074e6d2180bcadda27484e771ca9dd330c5634e9dc0577319bd8feee5de90f40a40db09ae4c833c6f03
- SSDEEP 98304:K3GCMxgt0dJKQ8tMsBTRZOjkqcM1Lzs0Xc18ZbNOdJkXk:KhMxgt0uQeMoRZhJM1Lzs0X08ZQdmXk
- TLSH
  T14426BFA0794180B1ECD120B6B36EB7A68E3D5E38176C34F793F428A506396D27A77347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Capitalism Lab/CapStart.exe
- Size 116KB
- SHA256 6edd64b09dfcc16276052c027dbffe4f9742f01162ad0fc62e0ef4649b5fe14b
- MD5 b0d855a5522af17d69e4b649c53fa550
- SHA1 7402136656c1bb761c92ace944497ad942d35782
- SHA512 21faef2e92b3331aa75dacbdb162113704f20bcfadda140e0a09c8c00740e427bb3db4935f6f1a909aa113b698bb831591ea4160d6012ecac80956e87f7a162c
- SSDEEP 3072:A8uvXdqD1y74s31jET8crJC3uE/k0hgcAROMskvU8wjHn:A/qslk0hgcAROMskvU8wjH
- TLSH
  T195C36C12BAE5D9F0E4A11D30803482F29E6F7D209F585C57AB493EB5EA301D19D32EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Capitalism Lab/Capitalism Lab.url
- Size 47B
- SHA256 6e205837b133294c8cff4cc873d18832e2def3507c169a0658d721b890a1d6c2
- MD5 2028d84d8ff00728ba24746a49f8f119
- SHA1 a96d361512883804b607e619c1e9280356ad6d81
- SHA512 f465038ffd35748d1c90b3a3d94a694d685f7702f1aabd30f035fdb9ca823a63bfe9bc2eebd97da342d7f33b4cca8384d2f99b03ddcf7e51d79af63d729361c1
- MD5 SHA1 SHA512
Score

1^/10
behavioral3
- Target
  Capitalism Lab/SDL2.dll
- Size 2.2MB
- SHA256 7b6264d68d6f6c9757b4bb04b2426ad498f467be783f92e3ae1b3af3a8d02ec2
- MD5 02bb4d99776c0455b8fc9f335a250997
- SHA1 c353635daa45cdc871e44a6600d217ce5bb2e98f
- SHA512 839a6b44b228b4054b297d24e0869f09339cdbc6cd85dc9a13eeee62a9c37838abfcb40519ea7e39152da18276238b265febd310f155d41ad0bfb57e3d3e0b9b
- SSDEEP 24576:UKODczGtySzk2XUqmevqqZ+IHhsMLFCzQIFAiqjdSewnpOCpTJQO/+Vp0Lr7bcoi:L0cbpqPDHxLzt6n+VeLrcm+zjDdV
- TLSH
  T110B5D640B7E707A9F9F70EF096B7B76B0936BC1AD814CAACA550154E5C31FA08464B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Capitalism Lab/font/Notice.html
- Size 10KB
- SHA256 c302375b1a785c7c94333b4b0c6156e7d5a94a6ae5a9c3cc1469c85f8df3a6ff
- MD5 c345da9a14fcb68226a0c05e52b48290
- SHA1 4b16978b7532094e36c3b9522424441b63faa2aa
- SHA512 d5ff96d2333ce44e7f5a79744a71f4dc54307073ddc012fe9e0d8f801b0ed8b69c7d6aa544997d33d4d1e5390aba6758d07fca091732774ec0ee961aadc8b2a9
- SSDEEP 192:SI+m+D29IMVocUTo1znYWTTFNzZFE6GF3vhtGS2Y1CV9hoPawY4Hqx+c08Jb395U:SIP+X6/Uk1zTTTrZE3Wym2iwYr+P8NrU
- TLSH
  T10722746FB79903370BC20272B78765CFF31E903D37952AA46049D06A1397D6583BB6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  CapMain.exe
- Size 5.2MB
- SHA256 5079f7899552ed667a650d7e2da76f3dacfc512bc000001f1389b6b352ab7fd5
- MD5 a212810ff6139477519ea9cf97f246be
- SHA1 6d5f933af0350492659172e1bc4adce8e7719992
- SHA512 cf9396d671799db110280a7aa1d626f737a95f8d43e5f2a137a5f1be3ee92574a141c27a571f81825a5840a3b10154b19121d2bd6ce15909de225967df48e3aa
- SSDEEP 98304:4FA6vYRyz+BOyhdTmk0Pk7EG4OsXnGgx1de:4kRyz+BOc70Pk7EGZs3Gsde
- TLSH
  T1BF46BE41748380B1DA9110BDD22EFBA6863F5D301F2D78E392C469654D762E23F7B27A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Capitalism Lab/languages/French/speech/products/lost_market_leader/Antivirus.mp3
- Size 22KB
- SHA256 1ce5726ec1e89a9e5d97e94cd741e32e051e66866f4594897110588587ac8a98
- MD5 5d8853022c6593e2f82ba3480fad90c2
- SHA1 5c9af6340e8890477f9ddab269d8811be23e76e4
- SHA512 fd2c7f9a769b0ef6769278d38e1f8f88cdbb4cba3aee8c9408f74836ed47e335ace105cd2c83e7b05a28ddf3817a3ffa854a67054f1dfb41bd9a9d984f966495
- SSDEEP 384:O7ldLr7JNj7MwH7oUAP1inJrlCGrxQsqWPEXOvrhKwegyBW0x4Er1J0G5wU3X8J:6917MU7oUo1o3xQys+vrgNq0pJeGCOg
- TLSH
  T1E1A2E1052BC46F5C7D25AC77F826F757D50AE6BAA00DB01F9E6C2030216B5806736AFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Capitalism Lab/languages/French/tutorial/speech/tut06/tut06-36.mp3
- Size 93KB
- SHA256 20e361efde109c46e22816e818abd83d8433af94111354efeb7f875da4e10c2b
- MD5 7242a0055ece432ece88cba62a5597cd
- SHA1 d07f2cdb1fa64fe389e435da686c117ba6b4a11d
- SHA512 e16636f167686d0bd90f20abbbf159c90fa5a9c4a8e895427d2b7796e4c90a97af293d92033073f2d240203ac7e7ddbef4b9aa165ce09d9155ac6182a84b1204
- SSDEEP 1536:tPFSnbwXEQ4BqqQux+yzwt1gMBDLmRomLQ1nqc3867ZT8/3rV:dFSu4QtuxuNl0oCQ8g63rV
- TLSH
  T122930246641E603DB8E7DCA28407F365CE2F4D2C971C05D7589AE67A08939F09BF2C93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  Capitalism Lab/languages/Japanese/image/guide/Thumbs.db
- Size 220KB
- SHA256 9ed3f1f360eb14437c565200bca874b0a24028ac268641d0c5dfbac2a5013248
- MD5 31cf45a1be488979635950d780231b49
- SHA1 d225d5c90bc955948c0f05c992851ec06d94d1b2
- SHA512 c95749dacfdf3a4820e2a0e375f938a6b7351ef2a6b86229b00c8d91cccd1f20ad8571c76e1069e8b2ea710af707aa1af952bba3596acfd361ba099c8c91ca58
- SSDEEP 6144:GnXLQ+XYdcM69WmA7jRh4mgmQTYQoCLeMk9YJ:maHege9EMf
- TLSH
  T1F824DF5BBF458F01E8ED46B96C03CE69A74BAF85A44313551462BEDFBFB0740888E06D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Capitalism Lab/languages/Japanese/translate/Notice.html
- Size 10KB
- SHA256 c302375b1a785c7c94333b4b0c6156e7d5a94a6ae5a9c3cc1469c85f8df3a6ff
- MD5 c345da9a14fcb68226a0c05e52b48290
- SHA1 4b16978b7532094e36c3b9522424441b63faa2aa
- SHA512 d5ff96d2333ce44e7f5a79744a71f4dc54307073ddc012fe9e0d8f801b0ed8b69c7d6aa544997d33d4d1e5390aba6758d07fca091732774ec0ee961aadc8b2a9
- SSDEEP 192:SI+m+D29IMVocUTo1znYWTTFNzZFE6GF3vhtGS2Y1CV9hoPawY4Hqx+c08Jb395U:SIP+X6/Uk1zTTTrZE3Wym2iwYr+P8NrU
- TLSH
  T10722746FB79903370BC20272B78765CFF31E903D37952AA46049D06A1397D6583BB6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  Capitalism Lab/languages/Korean/translate/Notice.html
- Size 10KB
- SHA256 c302375b1a785c7c94333b4b0c6156e7d5a94a6ae5a9c3cc1469c85f8df3a6ff
- MD5 c345da9a14fcb68226a0c05e52b48290
- SHA1 4b16978b7532094e36c3b9522424441b63faa2aa
- SHA512 d5ff96d2333ce44e7f5a79744a71f4dc54307073ddc012fe9e0d8f801b0ed8b69c7d6aa544997d33d4d1e5390aba6758d07fca091732774ec0ee961aadc8b2a9
- SSDEEP 192:SI+m+D29IMVocUTo1znYWTTFNzZFE6GF3vhtGS2Y1CV9hoPawY4Hqx+c08Jb395U:SIP+X6/Uk1zTTTrZE3Wym2iwYr+P8NrU
- TLSH
  T10722746FB79903370BC20272B78765CFF31E903D37952AA46049D06A1397D6583BB6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  Capitalism Lab/languages/Portuguese/font/Notice.html
- Size 10KB
- SHA256 618539bd5b4c1fe5188777e54828adc00b2a24b46437d3ff5990df35fc38b1cc
- MD5 311714ac294caf8fb28fc53d75352099
- SHA1 1059ff0756041dd0a60539bba3527cd1f3326279
- SHA512 dd3549c02bf0a40f41358850eb92daa81d2493e30d221c89a5a672815c2fdb036b5ccf6ae6debde6d1cfa5e203e7229b572275d4e5179eda49405dd46ac43786
- SSDEEP 192:qIC+jD29IMVocUTo1znYWTTFNzZFE6GF3vhtGS2Y1CVxhoPawY4Hqx+c08Jb395d:qInjX6/Uk1zTTTrZE3Wye2iwYr+P8Nrd
- TLSH
  T1FC22747FB79903370AC20272B78765CFF31E903D37952AA46049D06A1397D6583BB6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  Capitalism Lab/languages/Spanish/font/Notice.html
- Size 10KB
- SHA256 d7334fabd46633283690032b006d932f26449914392a4974c04a10b0b7b7e07d
- MD5 3866c3d5c89531e9bf3bfd8de2eff486
- SHA1 a1a4a7412f76a36a9f36446c2dafa4babc054886
- SHA512 e39f3fc97c583e43632ee63110cd64e8f9455dde01bed1cbd89be00f618dd4894e8efcb80991546d4937f8ebd49c0884ff11f8055bb51e03b3b1ad5cd428109b
- SSDEEP 192:92oSoazGs+VoPUTo1CnYtOTFNuZFE6G03vhoGl2d1CVdh6P9XY4HqxRc08JbS95e:Nti4WUk1CiOTmZ73QbOAlXYrRP8cre
- TLSH
  T1C722977FB75903371BC20262FB8765CBF31E903D37956AA86048D0781397D6583BB68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  Capitalism Lab/libcurl.dll
- Size 487KB
- SHA256 2164a6957f4bf002b1bc9c5a1c98f7948e636ba03c8661b2c5ec524c0f740c6e
- MD5 497e7d33637bf196518d03955b8e1137
- SHA1 4c194692bba9360da4f333a3b59ea26bbf53622a
- SHA512 73e4426b6548a443b56cc5f667ec790e1e59d84c8db6477f0ba4b6b0758bf25b356e9a667aae713cb80887838fad80564b5757ba61cf19977b5b775c49a84603
- SSDEEP 12288:mIpCCui3YNDxNYVHuC65FVHF3tPXIm8EA7I:zpCQYNleVHbkHF3tPXyr
- TLSH
  T1CFB48D93BA9157F2E2C9017861FB2B3B1E39521D5310A9C3C7D46875A9212E36B3F38D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  Capitalism Lab/speech/products/is_market_leader/3D Modeling Software.mp3
- Size 21KB
- SHA256 b4a3e2b5c07a27f432d1b548bf8a7d5f67dac8e8063a8b37f2f9b8cf9018bbfa
- MD5 bd5cfb297943ff804ffa7b358666a08f
- SHA1 b8d49ee1f63bbaa795cdc415149c781374c1907f
- SHA512 680fa73bc2d592701b90c95ff88af55e73bd8d5abbcf79f1228a87de0034916e5bfd6aa35c364c0bf6fd537e9dc9361ed6274a806cdda3223e4bdde85cde4823
- SSDEEP 384:Hm1DX+eSlDXwfjUUaOKDePehNSBYs1+3c028Uc+6PbXid6RZUWs1P8WTs51Thbvx:Hm1DXVFfjJapDxQBYvSeed3P8WTIzbvx
- TLSH
  T131A2CF8619C1877E34095C98F0BAF7D4E426CC9ECB58A3C5B54471FAA637674FB0E842
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Capitalism Lab/zlib1.dll
- Size 76KB
- SHA256 e27e53ae5ba84b67258dcd03f0d57328960fb83dc0db7a63bface570532930d8
- MD5 7919bc58c26f3ecdc31822740a53e6b0
- SHA1 5d030132ccc52c4ede0474798d2367449abdd967
- SHA512 f47c2ebb52a85c30767825bfb6e0f858fa68519cf89b0dd901c1787d44b668db15d08bf62f9b57743005cce0961ffb371afc76c149de69e9402791761a3c2951
- SSDEEP 1536:wRv5E85jsUKoS6onWUrFgpeIE2Fv0tCCvE1yIOsIO9vZI+K0:ov5F0oE3Cv0tCz1Qi9vZI+
- TLSH
  T136739D81BB9153F5D4F8007285E79B6DC63670248B46DCEBE38DBAA888117D1AF352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16