Static task
static1
Behavioral task
behavioral1
Sample
4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe.exe
Resource
win10v2004-20220414-en
General
-
Target
4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe
-
Size
313KB
-
MD5
d139d0dc306dddbe2682588983c0401a
-
SHA1
56cdf19ff447cb1270bf26bb7eda8b1c50994caf
-
SHA256
4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe
-
SHA512
81648b368cde0b1c9ee6859dce9ffb9af950ec020050758fcda9582d795a0ec8f650ee0dc9f3d0108f849770c65fda416d79dccf354e5896d00253121674d646
-
SSDEEP
3072:oZY/YqGvkbKhkZCyHgInNUAhc3Ypw6RYDgWLMm4snkWrOISohP0x4SRfR9lH:oCxNCbsN9mLMJssfV
Malware Config
Signatures
-
ElysiumStealer Payload 1 IoCs
resource yara_rule sample elysiumstealer -
Elysiumstealer family
Files
-
4506f6ade8adb9658f2b5518b8b818de3c6783c234e99f5c44896c31029f95fe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ