Static task
static1
Behavioral task
behavioral1
Sample
95dcd78b32e3ad8894154d10d3adb4942921f78cb95e95c1dcf62de5a0fd9f32.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
95dcd78b32e3ad8894154d10d3adb4942921f78cb95e95c1dcf62de5a0fd9f32.exe
Resource
win10v2004-20220414-en
General
-
Target
95dcd78b32e3ad8894154d10d3adb4942921f78cb95e95c1dcf62de5a0fd9f32
-
Size
456KB
-
MD5
f8f5db7bd7d752e5ce0c1b4403f1d6fa
-
SHA1
d400f38200a58a4da67fcc8dfc5c4a57daaa2cda
-
SHA256
95dcd78b32e3ad8894154d10d3adb4942921f78cb95e95c1dcf62de5a0fd9f32
-
SHA512
054bc98a671892ccc074133beecd4dd1101eca55ae5a608b6e611f04ebe706beec73f7d870e1ae62c7ab9832fb607e858c129f003db7985676dc42b5c50540af
-
SSDEEP
6144:/OvMhTJcvWXEsLsEf+/kE0Jg1ZGSswXY5PhzKpTzo5doPtLMJss1J0dR7CLP:/OvMhFjYEG/RXpAP8znPtU0zcP
Malware Config
Signatures
-
ElysiumStealer Payload 1 IoCs
resource yara_rule sample elysiumstealer -
Elysiumstealer family
Files
-
95dcd78b32e3ad8894154d10d3adb4942921f78cb95e95c1dcf62de5a0fd9f32.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 453KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ