General
- Target zitadokm.exe
- Size 176KB
- Sample260627-m3m33aaz4m
- SHA256 00aa902d33e47ef3ca5b7735ea3025e4ca65e1fc6a1dce051d2a54dd0d44a386
- MD5 540db448ca2ae3f67bdd46cd80fcd5a7
- SHA1 1728d6e0a71ccedb6ca65aae485a81994971e410
- SHA512 b4430e15312f77540809719ae32b9e6f388e2f063e41f61f56bfcbf11bed338d1675ff39feefbbca3a2935b2f10a538c538449a82927e020237ba354e7522742
- SSDEEP 3072:eP8AoBj7HyugScMCA51w6RYDgWLMm4snkWr12UdWZ+PM6:e8AoljyuKA5yLMJsl
- TLSH T19104BF4576908073D12B86799CE39B10DB7AF40117B2E38F6FA891AB9F233D4663B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zitadokm.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
zitadokm.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target zitadokm.exe
- Size 176KB
- SHA256 00aa902d33e47ef3ca5b7735ea3025e4ca65e1fc6a1dce051d2a54dd0d44a386
- MD5 540db448ca2ae3f67bdd46cd80fcd5a7
- SHA1 1728d6e0a71ccedb6ca65aae485a81994971e410
- SHA512 b4430e15312f77540809719ae32b9e6f388e2f063e41f61f56bfcbf11bed338d1675ff39feefbbca3a2935b2f10a538c538449a82927e020237ba354e7522742
- SSDEEP 3072:eP8AoBj7HyugScMCA51w6RYDgWLMm4snkWr12UdWZ+PM6:e8AoljyuKA5yLMJsl
- TLSH T19104BF4576908073D12B86799CE39B10DB7AF40117B2E38F6FA891AB9F233D4663B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
ElysiumStealer Support DLL
-
Family: ElysiumStealer
ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.
-
Loads dropped DLL