Extracted

• • Target

    ResourceHacker.exe

  • Size

    434KB

  • MD5

    66b3a222bcf3464b389c9d7a697e3f05

  • SHA1

    3958ae2a5824e7cba1409798f34bc1b9ac05ce2b

  • SHA256

    69779c8531872ce18a47e818dea9e838f240cd9c38781880ef322a447cfd7d83

  • SHA512

    2018369c510a69e07c01bf4c28ae87a8f8e615494bff5f7967c17bf75b5a17aabab37afaa32a6e83543b378ebf91862aa7414d4c6be65da174578ad83f6316ef

  • SSDEEP

    12288:gY+jwDMVvTaEDwWaLrBV77u96a/duPXz5E4sUFqr8orLS:OmWGHHxQ8Yf

  Score

  10^/10

  marsstealerdefaultstealer

  • Mars Stealer

    An infostealer written in C++ based on other infostealers.

    stealermarsstealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2