Overview

overview

10

Static

static

1

ee496f1606...23.exe

windows7-x64

10

ee496f1606...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee496f1606f4f5efe8f45af252634f836502a05fb2d26950da0cbf53faebda23.exe

  • Size

    159KB

  • Sample

    230207-k3a3dsaf84

  • MD5

    b29ad70c7126ec04cabfbd250eb6773d

  • SHA1

    b478853d86fe81a499f7b3e25b693e2eb3c1d28f

  • SHA256

    ee496f1606f4f5efe8f45af252634f836502a05fb2d26950da0cbf53faebda23

  • SHA512

    e772cbe6ec92648f69609beed99bd47af2d0aab5ef1c5817944cbdcd2951ff4e97b6639e9f653b405cf5d5b8249c3cc9ce4101ae2ae186d49abc416e80375c80

  • SSDEEP

    3072:Uk4sWR8jfowtrMuayS8h1556XhNWVub5vokomPb2eJSp8Bb8EG:QsWRWfDtrE2whpfPqC8EG

Score
10/10
marsstealerdefaultstealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

C2

188.127.227.72/gate.php

Targets

    • Target

      ee496f1606f4f5efe8f45af252634f836502a05fb2d26950da0cbf53faebda23.exe

    • Size

      159KB

    • MD5

      b29ad70c7126ec04cabfbd250eb6773d

    • SHA1

      b478853d86fe81a499f7b3e25b693e2eb3c1d28f

    • SHA256

      ee496f1606f4f5efe8f45af252634f836502a05fb2d26950da0cbf53faebda23

    • SHA512

      e772cbe6ec92648f69609beed99bd47af2d0aab5ef1c5817944cbdcd2951ff4e97b6639e9f653b405cf5d5b8249c3cc9ce4101ae2ae186d49abc416e80375c80

    • SSDEEP

      3072:Uk4sWR8jfowtrMuayS8h1556XhNWVub5vokomPb2eJSp8Bb8EG:QsWRWfDtrE2whpfPqC8EG

    Score
    10/10
    marsstealerdefaultstealer

    • Mars Stealer

      An infostealer written in C++ based on other infostealers.

      stealermarsstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks