General

  • Target

    21d7514ffec0e458d2edb4a864c699a6958b44881d53028c3dd94dd8dc5f31a2

  • Size

    339KB

  • Sample

    220524-z795lscdap

  • MD5

    3af6c90f7f68a433eeb65af4640a813c

  • SHA1

    0a12045e39a5b6f96a3258e8ee07e7fcf0148896

  • SHA256

    21d7514ffec0e458d2edb4a864c699a6958b44881d53028c3dd94dd8dc5f31a2

  • SHA512

    88aab8c92f6fba49656340d8ea5e17fda85c99d38267c8ff60225cb1abe07c4a40b2dbbc3fe2d377d7885ae14af1f032973d57e42690f2a7f446ab3df5f29245

Malware Config

Targets

    • Target

      21d7514ffec0e458d2edb4a864c699a6958b44881d53028c3dd94dd8dc5f31a2

    • Size

      339KB

    • MD5

      3af6c90f7f68a433eeb65af4640a813c

    • SHA1

      0a12045e39a5b6f96a3258e8ee07e7fcf0148896

    • SHA256

      21d7514ffec0e458d2edb4a864c699a6958b44881d53028c3dd94dd8dc5f31a2

    • SHA512

      88aab8c92f6fba49656340d8ea5e17fda85c99d38267c8ff60225cb1abe07c4a40b2dbbc3fe2d377d7885ae14af1f032973d57e42690f2a7f446ab3df5f29245

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks