Overview

overview

10

Static

static

1

VTProblem-VM (2).exe

windows7-x64

10

VTProblem-VM (2).exe

windows10-2004-x64

10

Resubmissions

19-02-2023 16:10

230219-tmlzdsfh96 10

19-02-2023 16:06

230219-tj4p2afd3z 10

19-02-2023 16:05

230219-tjjd4afh92 10

19-02-2023 16:04

230219-th18hsfd3x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VTProblem-VM (2).exe

  • Size

    232KB

  • Sample

    230219-tj4p2afd3z

  • MD5

    517b49453e545a36c8f1a3bc33251cc5

  • SHA1

    e8a06fdbfbb2dc8052ede370bd977da819224a0d

  • SHA256

    48ee8d72d38ee855eafaf022a158d649d32e1b4e919e7b6f8d8b94ce47e43e98

  • SHA512

    a477ff24d032418ca17951d69cbcd77eb0d56784d96e58505077c69ead5fe0787869a756a8fb00f9c61a7aa4adb8c026acd571b6f330cae87ca020b5f498c9fe

  • SSDEEP

    6144:Iio6TsKXWMLMJsVX+J4WAQ9mhYHuOjwae9fDjxExnDE7RPiA0:IA4QWCHX+JSQ9mhYHuOjwae9fDjxExnI

Score
10/10
elysiumstealerstealer

Malware Config

Targets

    • Target

      VTProblem-VM (2).exe

    • Size

      232KB

    • MD5

      517b49453e545a36c8f1a3bc33251cc5

    • SHA1

      e8a06fdbfbb2dc8052ede370bd977da819224a0d

    • SHA256

      48ee8d72d38ee855eafaf022a158d649d32e1b4e919e7b6f8d8b94ce47e43e98

    • SHA512

      a477ff24d032418ca17951d69cbcd77eb0d56784d96e58505077c69ead5fe0787869a756a8fb00f9c61a7aa4adb8c026acd571b6f330cae87ca020b5f498c9fe

    • SSDEEP

      6144:Iio6TsKXWMLMJsVX+J4WAQ9mhYHuOjwae9fDjxExnDE7RPiA0:IA4QWCHX+JSQ9mhYHuOjwae9fDjxExnI

    Score
    10/10
    elysiumstealerstealer

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

      stealerelysiumstealer

    • ElysiumStealer Support DLL

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks