General

  • Target

    cb129cd67225cb40c544eab07466be9305132fc9607214174b48f4167e0b6b3d

  • Size

    78KB

  • Sample

    210913-net25sgfam

  • MD5

    a8db62010fc3ff8a86abdf3988646a8c

  • SHA1

    247577574d8f60a064b03d9f2a627d0bdbc6d2a6

  • SHA256

    cb129cd67225cb40c544eab07466be9305132fc9607214174b48f4167e0b6b3d

  • SHA512

    8234d169c809f91658f88ccb80be1dbae587ff9e0a3e517f4b42ac0f2e4a3be73b77bba787b6ebc55422c2f081b9c07e44f1192d63c90d3837b55597f68b0e1d

Malware Config

Targets

    • Target

      cb129cd67225cb40c544eab07466be9305132fc9607214174b48f4167e0b6b3d

    • Size

      78KB

    • MD5

      a8db62010fc3ff8a86abdf3988646a8c

    • SHA1

      247577574d8f60a064b03d9f2a627d0bdbc6d2a6

    • SHA256

      cb129cd67225cb40c544eab07466be9305132fc9607214174b48f4167e0b6b3d

    • SHA512

      8234d169c809f91658f88ccb80be1dbae587ff9e0a3e517f4b42ac0f2e4a3be73b77bba787b6ebc55422c2f081b9c07e44f1192d63c90d3837b55597f68b0e1d

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks