Overview

overview

10

Static

static

10

1716-0-0x0...ry.exe

windows7-x64

10

1716-0-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1716-0-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    b6d9b20b21613a3766019394cd382d55

  • SHA1

    49a458d7189c0e9b955b45695cb123f7f3a2e790

  • SHA256

    f1b0e039aa7d383f95dd338b410e26dfd88bb0c66325291604b9d5db5a495693

  • SHA512

    182f3fe30e3cdfe8a72a320fe2367f36de53a8d4009bd9043d0da42814e18cb098e27d4774e5c075ed3d6b0a1e6803c9faeb3da283c07ba1817d5b458b62997e

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaS6JSp8db8EG:N/E8k91zz6/tN8EG

Score
10/10
defaultmarsstealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Signatures

  • Marsstealer family
    marsstealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1716-0-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows x86


    Headers

    Sections