Overview

overview

10

Static

static

10

elysium.exe

windows7-x64

10

elysium.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    elysium.exe

  • Size

    226KB

  • MD5

    82ccbbde260a98f862ea126d299b0b71

  • SHA1

    2cd43eddfe918028f547022d230e62a0e85bdbc2

  • SHA256

    75abd141e4943f0e16e7f41a0abeb42c30b5f55b1385d24f424130a6293e36e6

  • SHA512

    04a34d5ff5d4176bb22ed4465f4a384803386574657235e467ccd47b09a29b4e099751874b798e1f154fe46b76b20d294f84644d198725317cecb857e9f02fd4

  • SSDEEP

    1536:qKLmxH+ntFde3+YUbpP9A1j31udBanqY5DW1VepqKmY7:qT1+ntiuYUbpCVlrDcVtz

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

Attributes
  • delay

    1

  • install

    true

  • install_file

    update.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/950byHsB

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • elysium.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections