General

  • Target

    e8ba766bb902971b556242a4cfef730a9d5e1913086fafd328740f85faf1963b

  • Size

    80KB

  • Sample

    210913-net25sdee2

  • MD5

    f46064337e616b027b70c51992514a6e

  • SHA1

    9a589a670c141bcc1a7e923376b34b65f41c39db

  • SHA256

    e8ba766bb902971b556242a4cfef730a9d5e1913086fafd328740f85faf1963b

  • SHA512

    163e771afc967f93b27ac6d84ef804d934cc7f707f007893c69d73a81f161d6bd7937b97598ae8e2eca7193a23cc3af1637ddc5c2fcf9a5a0e33120c6453d21a

Malware Config

Targets

    • Target

      e8ba766bb902971b556242a4cfef730a9d5e1913086fafd328740f85faf1963b

    • Size

      80KB

    • MD5

      f46064337e616b027b70c51992514a6e

    • SHA1

      9a589a670c141bcc1a7e923376b34b65f41c39db

    • SHA256

      e8ba766bb902971b556242a4cfef730a9d5e1913086fafd328740f85faf1963b

    • SHA512

      163e771afc967f93b27ac6d84ef804d934cc7f707f007893c69d73a81f161d6bd7937b97598ae8e2eca7193a23cc3af1637ddc5c2fcf9a5a0e33120c6453d21a

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks