elysiumstealer | 2ab5a115c50fd5775ec3e53750835d48147f671818af1c2689fc785f063244de

Analysis

max time kernel
53s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-09-2022 16:36

Target

Icarus-Release-main/ICARUS.exe
Size

8.5MB
MD5

e6a620574c5dc9ce58e154d70c1d9554
SHA1

8393b760d657ab39d92a43070d75be25c315b8c9
SHA256

e7a1e22275898facd79c2dd59f2be158317ae44cb7eb661a3b7e0f351f0c8a4c
SHA512

5b4deaad005c9145dbda58859ea5063e081339c6fe5c21069c0eedaf0bac1fbda501bd5c10b13b8c7e4c860a5456f8f03c5bc95cda1a6094b215eada542522ce
SSDEEP

196608:aCkRUlCbTlSndgMimOXNsCDC4PfcPsRV:aCkqlCsdgvXyQC4

Score

10^/10

ElysiumStealer
ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.
stealer elysiumstealer

ElysiumStealer Support DLL 1 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\Runtime.MSIL.1.0.0.0\NativePRo.dll	elysiumstealer_dll

ElysiumStealer payload 1 IoCs

Processes:

resource	yara_rule
behavioral3/memory/4340-132-0x0000000000CC0000-0x000000000153E000-memory.dmp	elysiumstealer

Loads dropped DLL 1 IoCs

Processes:

ICARUS.exe

pid process

4340 ICARUS.exe

pid	process
4340	ICARUS.exe

C:\Users\Admin\AppData\Local\Temp\Icarus-Release-main\ICARUS.exe
"C:\Users\Admin\AppData\Local\Temp\Icarus-Release-main\ICARUS.exe"
1⤵
- Loads dropped DLL
PID:4340

C:\Users\Admin\AppData\Local\Temp\Runtime.MSIL.1.0.0.0\NativePRo.dll

Filesize
40KB

MD5
94173de2e35aa8d621fc1c4f54b2a082

SHA1
fbb2266ee47f88462560f0370edb329554cd5869

SHA256
7e2c70b7732fb1a9a61d7ce3d7290bc7b31ea28cbfb1dbc79d377835615b941f

SHA512
cadbf4db0417283a02febbabd337bf17b254a6eb6e771f8a553a140dd2b04efd0672b1f3175c044a3edd0a911ce59d6695f765555262560925f3159bb8f3b798

Download Submit
memory/4340-132-0x0000000000CC0000-0x000000000153E000-memory.dmp

Filesize
8.5MB

Download
memory/4340-134-0x00000000064E0000-0x0000000006A84000-memory.dmp

Filesize
5.6MB

Download
memory/4340-135-0x0000000005F30000-0x0000000005FC2000-memory.dmp

Filesize
584KB

Download
memory/4340-136-0x0000000005FF0000-0x0000000005FFA000-memory.dmp

Filesize
40KB

Download