Overview

overview

10

Static

static

10

5104-1096-...ry.exe

windows7-x64

10

5104-1096-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5104-1096-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    7007253c5aed7cb92ad748f9f5281ad2

  • SHA1

    2e68612161059720b07588f7fbb25bbc722ed415

  • SHA256

    a9a295069abd00197cfb76ce491dac6f98830d8b09a4ff2e69cf4cb69f1eb043

  • SHA512

    572cf8f4b3c4f2fec8a6aaac921c6fe776ffb1a57b949f7a3949b2a5c015cbab1be449b42ed6ea13e89d83b759680a6e40d094e41eda2919d9ec54838de94030

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaSLJSp8kb8EG:N/E8k91zz6/tN8EG

Score
10/10
defaultmarsstealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Signatures

  • Marsstealer family
    marsstealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5104-1096-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows x86


    Headers

    Sections