Resubmissions

22-03-2024 17:46

240322-wcdldaed78 10

22-03-2024 13:04

240322-qaz4pseb4w 10

General

  • Target

    AutoClick.exe

  • Size

    1.8MB

  • Sample

    240322-qaz4pseb4w

  • MD5

    18082775ad95b33564a1129ecd3caf9a

  • SHA1

    2197f396533b532e044eb271c333985da1fd3675

  • SHA256

    9651a812e057af1920b6700e3ef0c6b6bc147c65be3546d9ab0900dedd0be1b6

  • SHA512

    8bfc97d454aa11aacef3bb14e24bb0fb5df0f86cc7ba24241571b708d54dd50a31578ae008c1fa20fd0a868f039e84599aaf06a19d4959e223972bc9952cc6a5

  • SSDEEP

    49152:37Ckt5baqAC/8yfMSpvoY+b5MreCb9Eb36Sn:3X5balCTDAYPXbCz6C

Score
10/10

Malware Config

Targets

    • Target

      AutoClick.exe

    • Size

      1.8MB

    • MD5

      18082775ad95b33564a1129ecd3caf9a

    • SHA1

      2197f396533b532e044eb271c333985da1fd3675

    • SHA256

      9651a812e057af1920b6700e3ef0c6b6bc147c65be3546d9ab0900dedd0be1b6

    • SHA512

      8bfc97d454aa11aacef3bb14e24bb0fb5df0f86cc7ba24241571b708d54dd50a31578ae008c1fa20fd0a868f039e84599aaf06a19d4959e223972bc9952cc6a5

    • SSDEEP

      49152:37Ckt5baqAC/8yfMSpvoY+b5MreCb9Eb36Sn:3X5balCTDAYPXbCz6C

    Score
    10/10
    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Support DLL

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks