General

  • Target

    2ed4f4567a1a4b9c72e57252fa97d5d2ce78f533c92b943fcfdfaeba9cbd0b62

  • Size

    456KB

  • Sample

    220501-3kcsdabbfn

  • MD5

    f08507a6478d447264f623f6ad115bf4

  • SHA1

    39fe440ea8afbdeaa489cdb22a046283cb1d9c23

  • SHA256

    2ed4f4567a1a4b9c72e57252fa97d5d2ce78f533c92b943fcfdfaeba9cbd0b62

  • SHA512

    ac0ee664f4a1dc9a48d6deba2bf7912e0daa8477c448ae8fbc6ff4d2bfc406ecb2d8131063873849b9fc2757de32e304c124a3f1a84285b6dbaff6fe16202645

Malware Config

Targets

    • Target

      2ed4f4567a1a4b9c72e57252fa97d5d2ce78f533c92b943fcfdfaeba9cbd0b62

    • Size

      456KB

    • MD5

      f08507a6478d447264f623f6ad115bf4

    • SHA1

      39fe440ea8afbdeaa489cdb22a046283cb1d9c23

    • SHA256

      2ed4f4567a1a4b9c72e57252fa97d5d2ce78f533c92b943fcfdfaeba9cbd0b62

    • SHA512

      ac0ee664f4a1dc9a48d6deba2bf7912e0daa8477c448ae8fbc6ff4d2bfc406ecb2d8131063873849b9fc2757de32e304c124a3f1a84285b6dbaff6fe16202645

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks