Extracted

• • Target

    PumpedUp.exe

  • Size

    743.9MB

  • MD5

    e831ccf678cfa1d780a1749ee7f78587

  • SHA1

    f1b6098241538821819a8a19e0573aca6b5b5408

  • SHA256

    9cbc4811e3a6682dc7e2c91de05409e9245495330f8bb72a5a12d0a5bd63556f

  • SHA512

    b0c217c43b7df9ad269aa232142380e5e33fa29c3e6bf4a47d95636d8e8ce33c0a5394101c5e2bdf0d6352e1620c7010a517e0459e3f641ae52923376cbab7b9

  • SSDEEP

    12288:AGLgiIVtZ7XtAJh1Upw+0/y49EkUk184RWHEScjYe:AwlQtZmJvUph0/yt7kae9ce

  Score

  10^/10

  marsstealerdefaultspywarestealer

  • Mars Stealer

    An infostealer written in C++ based on other infostealers.

    stealermarsstealer

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2