General

  • Target

    JaffaCakes118_7534a23f5588a3ed9f9a4ed4491e4688

  • Size

    12.6MB

  • Sample

    250107-x7p4bsxjhl

  • MD5

    7534a23f5588a3ed9f9a4ed4491e4688

  • SHA1

    6202d74164ae6f92da7ca7578dcbfc6c17e924b3

  • SHA256

    68f092746a96bda57b8fef94ee7ce1a3b8da519d79c5997ba4493c4b2794d739

  • SHA512

    65ac3cb1661a639cb8cd768205bac8f80ee3b3791617034089aa18e82c696cdbc680028dff487d667c268af635b417aec71d8bd8d20b5b1704b42f0aa2c23572

  • SSDEEP

    393216:T5VWBCvc51K3htnQuZifBmpWbVd+iskT5:T5c8vca3DQuAZmpAVDvT

Malware Config

Targets

    • Target

      JaffaCakes118_7534a23f5588a3ed9f9a4ed4491e4688

    • Size

      12.6MB

    • MD5

      7534a23f5588a3ed9f9a4ed4491e4688

    • SHA1

      6202d74164ae6f92da7ca7578dcbfc6c17e924b3

    • SHA256

      68f092746a96bda57b8fef94ee7ce1a3b8da519d79c5997ba4493c4b2794d739

    • SHA512

      65ac3cb1661a639cb8cd768205bac8f80ee3b3791617034089aa18e82c696cdbc680028dff487d667c268af635b417aec71d8bd8d20b5b1704b42f0aa2c23572

    • SSDEEP

      393216:T5VWBCvc51K3htnQuZifBmpWbVd+iskT5:T5c8vca3DQuAZmpAVDvT

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

    • ElysiumStealer Support DLL

    • Elysiumstealer family

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks