General

  • Target

    VenomClient.exe

  • Size

    3.7MB

  • Sample

    230316-2cndgafc9x

  • MD5

    98192e2673ebbe334213a30bde1beca7

  • SHA1

    f1b9635b1b9f1c9b4b3e5410c20c434fc0547d16

  • SHA256

    a3bf251467b84ebd22359e7b2c8b0d9c50fcbc035445116d596e063281872e1e

  • SHA512

    46275356fead66f57e3c79a460546e05d515a353e7c61ea0a505990d916620320fd7a320e28f140b6a8faa94b40e2db195556f899bdaba1a891112057bb6fa98

  • SSDEEP

    98304:abXkOKCq3dUAcvDPyK1N+HH1mAPMHE+mcgzzKIXlX+JSQuYHuOjwaWfDjxExnDYO:a7kOKCq3dUAy1NuPMk+mcgzpVX+JSQuJ

Score
10/10

Malware Config

Targets

    • Target

      VenomClient.exe

    • Size

      3.7MB

    • MD5

      98192e2673ebbe334213a30bde1beca7

    • SHA1

      f1b9635b1b9f1c9b4b3e5410c20c434fc0547d16

    • SHA256

      a3bf251467b84ebd22359e7b2c8b0d9c50fcbc035445116d596e063281872e1e

    • SHA512

      46275356fead66f57e3c79a460546e05d515a353e7c61ea0a505990d916620320fd7a320e28f140b6a8faa94b40e2db195556f899bdaba1a891112057bb6fa98

    • SSDEEP

      98304:abXkOKCq3dUAcvDPyK1N+HH1mAPMHE+mcgzzKIXlX+JSQuYHuOjwaWfDjxExnDYO:a7kOKCq3dUAy1NuPMk+mcgzpVX+JSQuJ

    Score
    10/10
    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks