General

  • Target

    896247b1f2766c04fcf28d476e1c09a26dc201760a0776e927940e8586f59800

  • Size

    440KB

  • Sample

    220501-3j77wsbbfj

  • MD5

    8465499678b8348bdffe8c78602aeb67

  • SHA1

    5e9a963e097497df8456882037657b9468af199c

  • SHA256

    896247b1f2766c04fcf28d476e1c09a26dc201760a0776e927940e8586f59800

  • SHA512

    82f8a2b88677f75a4eb71829f9c354a608d1b95da511ff127424b2734a91a59ed98036493978f29a30b43216c9aee08152cf099820b304bd3e240aa410cebeba

Malware Config

Targets

    • Target

      896247b1f2766c04fcf28d476e1c09a26dc201760a0776e927940e8586f59800

    • Size

      440KB

    • MD5

      8465499678b8348bdffe8c78602aeb67

    • SHA1

      5e9a963e097497df8456882037657b9468af199c

    • SHA256

      896247b1f2766c04fcf28d476e1c09a26dc201760a0776e927940e8586f59800

    • SHA512

      82f8a2b88677f75a4eb71829f9c354a608d1b95da511ff127424b2734a91a59ed98036493978f29a30b43216c9aee08152cf099820b304bd3e240aa410cebeba

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks