Overview

overview

10

Static

static

10

1664220f84...19.exe

windows7_x64

10

1664220f84...19.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1664220f8434fb013a1db8edf76404dba9914384745c043f95acf6d4c55af019

  • Size

    880KB

  • Sample

    220306-zf2ddsehb3

  • MD5

    fe193becdceebef2cf2fcf6eddbeff82

  • SHA1

    27faa314e1f1a76190318d74e72f04bc5b0e7227

  • SHA256

    1664220f8434fb013a1db8edf76404dba9914384745c043f95acf6d4c55af019

  • SHA512

    c472f16fcc6bd0ddf59833082aa812c311ed16961f144b62fc84ee935875ddd207188979f55c95468e7ee7e64267e29e4ada1f6abb4c796eb030a6ed175c4665

Score
10/10
elysiumstealerpersistencestealer

Malware Config

Targets

    • Target

      1664220f8434fb013a1db8edf76404dba9914384745c043f95acf6d4c55af019

    • Size

      880KB

    • MD5

      fe193becdceebef2cf2fcf6eddbeff82

    • SHA1

      27faa314e1f1a76190318d74e72f04bc5b0e7227

    • SHA256

      1664220f8434fb013a1db8edf76404dba9914384745c043f95acf6d4c55af019

    • SHA512

      c472f16fcc6bd0ddf59833082aa812c311ed16961f144b62fc84ee935875ddd207188979f55c95468e7ee7e64267e29e4ada1f6abb4c796eb030a6ed175c4665

    Score
    10/10
    elysiumstealerpersistencestealer

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

      stealerelysiumstealer

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks