General

  • Target

    NEAS.5aa167ab280ea84e294fba258b909930.exe

  • Size

    327KB

  • Sample

    231020-v49mfseh7t

  • MD5

    5aa167ab280ea84e294fba258b909930

  • SHA1

    9441bcd205d9947363c54ae9ad4f87c254c2eadd

  • SHA256

    745c675f7b4c670b502daecc69ff4370e649522186596a8da6fcb8bddf467183

  • SHA512

    50f7376b8000adfec79c8be0eada607fde2c57d8a1d4e7a5a707ebd0582327eab2027bfef698c9283406eac3a0187e8194f0964c2abe22681737c525e80086fe

  • SSDEEP

    6144:WhHB2fuqrkobN2D/MnKfRiVTYTINJDxPnucPrETcEMk/kKRTihoV:WZguqr5Bg/MnK5xTINJrPrkcEMkx

Malware Config

Extracted

Family

marsstealer

Botnet

Default

C2

46.23.109.160/jfdjc.php

Targets

    • Target

      NEAS.5aa167ab280ea84e294fba258b909930.exe

    • Size

      327KB

    • MD5

      5aa167ab280ea84e294fba258b909930

    • SHA1

      9441bcd205d9947363c54ae9ad4f87c254c2eadd

    • SHA256

      745c675f7b4c670b502daecc69ff4370e649522186596a8da6fcb8bddf467183

    • SHA512

      50f7376b8000adfec79c8be0eada607fde2c57d8a1d4e7a5a707ebd0582327eab2027bfef698c9283406eac3a0187e8194f0964c2abe22681737c525e80086fe

    • SSDEEP

      6144:WhHB2fuqrkobN2D/MnKfRiVTYTINJDxPnucPrETcEMk/kKRTihoV:WZguqr5Bg/MnK5xTINJrPrkcEMkx

    • Mars Stealer

      An infostealer written in C++ based on other infostealers.

MITRE ATT&CK Matrix

Tasks