General

  • Target

    1716-0-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • Sample

    230907-z57xgaec7y

  • MD5

    b6d9b20b21613a3766019394cd382d55

  • SHA1

    49a458d7189c0e9b955b45695cb123f7f3a2e790

  • SHA256

    f1b0e039aa7d383f95dd338b410e26dfd88bb0c66325291604b9d5db5a495693

  • SHA512

    182f3fe30e3cdfe8a72a320fe2367f36de53a8d4009bd9043d0da42814e18cb098e27d4774e5c075ed3d6b0a1e6803c9faeb3da283c07ba1817d5b458b62997e

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaS6JSp8db8EG:N/E8k91zz6/tN8EG

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Targets

    • Target

      1716-0-0x0000000000400000-0x000000000043D000-memory.dmp

    • Size

      244KB

    • MD5

      b6d9b20b21613a3766019394cd382d55

    • SHA1

      49a458d7189c0e9b955b45695cb123f7f3a2e790

    • SHA256

      f1b0e039aa7d383f95dd338b410e26dfd88bb0c66325291604b9d5db5a495693

    • SHA512

      182f3fe30e3cdfe8a72a320fe2367f36de53a8d4009bd9043d0da42814e18cb098e27d4774e5c075ed3d6b0a1e6803c9faeb3da283c07ba1817d5b458b62997e

    • SSDEEP

      3072:Um/E8k9ZjpIL+zNch12KbAwSaS6JSp8db8EG:N/E8k91zz6/tN8EG

    Score
    10/10
    • Arkei

      Arkei is an infostealer written in C++.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks