Static task
static1
Behavioral task
behavioral1
Sample
5589a7db8c263ba1902b3e4b19387d1979bc98c915e908d43377f7c42409a549.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5589a7db8c263ba1902b3e4b19387d1979bc98c915e908d43377f7c42409a549.exe
Resource
win10v2004-20220414-en
General
-
Target
5589a7db8c263ba1902b3e4b19387d1979bc98c915e908d43377f7c42409a549
-
Size
620KB
-
MD5
bbae04f0c7d0e849b5d42d4a4f21b2af
-
SHA1
33f76ab40a9e38a95ddfe7743ecd51de047393fe
-
SHA256
5589a7db8c263ba1902b3e4b19387d1979bc98c915e908d43377f7c42409a549
-
SHA512
3837c182453cb156dfa2127a19506d25b166698087d30a192caafbb540134906902cf81e2df0a9f33f1227a3acc3525b9f3748a8fa0144db759ebf26f686c93e
-
SSDEEP
12288:ZBrTkcO/JuiiZCYxqnd1gq9WQBemo+K2:ZRkcmJlaonfZemo+K
Malware Config
Signatures
-
ElysiumStealer Payload 1 IoCs
Processes:
resource yara_rule sample elysiumstealer -
Elysiumstealer family
Files
-
5589a7db8c263ba1902b3e4b19387d1979bc98c915e908d43377f7c42409a549.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ