General

  • Target

    98cef65471f42aa6bf548100eded72295a547357c0dbd1d22cc02cc9eb3402f4

  • Size

    230KB

  • Sample

    220524-z78a1sgee2

  • MD5

    c433ffd7b11f3871d538dde5ec0bd368

  • SHA1

    9b9fea34a9be4602415abc7dd525f12ce8c2a527

  • SHA256

    98cef65471f42aa6bf548100eded72295a547357c0dbd1d22cc02cc9eb3402f4

  • SHA512

    05bfa210189a18b2cf570b5f319421381ed93d63e54ef3beb11235bbc19aaf748df00e1922db1cc703489fe334f003fc52106ce4eb6627488bc8687c97109d46

Malware Config

Targets

    • Target

      98cef65471f42aa6bf548100eded72295a547357c0dbd1d22cc02cc9eb3402f4

    • Size

      230KB

    • MD5

      c433ffd7b11f3871d538dde5ec0bd368

    • SHA1

      9b9fea34a9be4602415abc7dd525f12ce8c2a527

    • SHA256

      98cef65471f42aa6bf548100eded72295a547357c0dbd1d22cc02cc9eb3402f4

    • SHA512

      05bfa210189a18b2cf570b5f319421381ed93d63e54ef3beb11235bbc19aaf748df00e1922db1cc703489fe334f003fc52106ce4eb6627488bc8687c97109d46

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks