General

  • Target

    59604cfc9abd7621d66ded13ee63f76f06709846308bbd412f25063d42e4f79a

  • Size

    440KB

  • Sample

    220508-gzb9hahag4

  • MD5

    d3937c560d6ccd27e80a5a1749c72561

  • SHA1

    7ae5722e2f823fbb1334e244b34ef5854129fde0

  • SHA256

    59604cfc9abd7621d66ded13ee63f76f06709846308bbd412f25063d42e4f79a

  • SHA512

    76db88a01e16172599a4744fc9c68b84e323395b557d976f10ba7f488522ef39f63fb64a803bfcbac163a3ad67964cc1e6c2e58deb7fc2619de018be2e2cbdf6

Malware Config

Targets

    • Target

      59604cfc9abd7621d66ded13ee63f76f06709846308bbd412f25063d42e4f79a

    • Size

      440KB

    • MD5

      d3937c560d6ccd27e80a5a1749c72561

    • SHA1

      7ae5722e2f823fbb1334e244b34ef5854129fde0

    • SHA256

      59604cfc9abd7621d66ded13ee63f76f06709846308bbd412f25063d42e4f79a

    • SHA512

      76db88a01e16172599a4744fc9c68b84e323395b557d976f10ba7f488522ef39f63fb64a803bfcbac163a3ad67964cc1e6c2e58deb7fc2619de018be2e2cbdf6

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks