Overview

overview

10

Static

static

10

2544-27-0x...ry.exe

windows7-x64

10

2544-27-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2544-27-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    872338f6832a9e4bce49eb6b3c0c0521

  • SHA1

    73eb648c807c8a8e55788c2920d87ba834ba720e

  • SHA256

    4dcf63974baa3d73de84c0a03a95db6079c5c13adb5e7247d9c2d8bbfa681622

  • SHA512

    8291011f5b03a3db84af4764aec17fc640676a2a4c458f3d2ba14fd65219e5a3fe535b5946aca32f62cdb76e940f93ddd517a6ecfad29000e244f9ce10853a7f

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaS2JSp8xb8EG:N/E8k91zz6/tZ8EG

Score
10/10
defaultmarsstealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Signatures

  • Marsstealer family
    marsstealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2544-27-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections