Overview

overview

10

Static

static

10

2936-11-0x...ry.exe

windows7-x64

10

2936-11-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2936-11-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    18fe7212c364cbc7fa2db1ab3ad87428

  • SHA1

    73b75cc9ec43ffa1d20a13af914458628d4fe3b1

  • SHA256

    8819e0bd93b3a2e6c5465e75c626dc7d8f493e9d23f3fd5832441b3500899581

  • SHA512

    577c8c0abed97ee629a9b4e1eb98f0c5e08ffa1120f0cf63718852fbaf800e87fe12248322a350399942c7c11b6d34d1b0b9d44291330da5efbd96e6445320c4

  • SSDEEP

    3072:Um/E8k9ZjpIn+zNch12KbAwSaSVJSp8jJb8EG:N/E8k91rz6/to18EG

Score
10/10
defaultmarsstealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

C2

151.236.218.158/wp-content/log.php

Signatures

  • Marsstealer family
    marsstealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2936-11-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows x86


    Headers

    Sections