General

  • Target

    4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe

  • Size

    313KB

  • Sample

    220524-zysh7scagn

  • MD5

    d139d0dc306dddbe2682588983c0401a

  • SHA1

    56cdf19ff447cb1270bf26bb7eda8b1c50994caf

  • SHA256

    4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe

  • SHA512

    81648b368cde0b1c9ee6859dce9ffb9af950ec020050758fcda9582d795a0ec8f650ee0dc9f3d0108f849770c65fda416d79dccf354e5896d00253121674d646

Malware Config

Targets

    • Target

      4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe

    • Size

      313KB

    • MD5

      d139d0dc306dddbe2682588983c0401a

    • SHA1

      56cdf19ff447cb1270bf26bb7eda8b1c50994caf

    • SHA256

      4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe

    • SHA512

      81648b368cde0b1c9ee6859dce9ffb9af950ec020050758fcda9582d795a0ec8f650ee0dc9f3d0108f849770c65fda416d79dccf354e5896d00253121674d646

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Payload

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks