General

  • Target

    2144-67-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • Sample

    231025-xxh72afc4t

  • MD5

    8da8b1446a6a339793d343b9b720140f

  • SHA1

    95629befc809f2f9afab793be73fc179856da880

  • SHA256

    716d0e2ccb48759858322324c7224a1569075202a6f4f50a9dda8d8de9171088

  • SHA512

    f312633a7e2cbbdc0711c2bb77e17acae3e9275bbeb4e584caedac1c5e364322f61b3eeaf5f6f21bb8646135361a03fb0a24744acad965eaba137214b1a25e3d

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaSgJSp8Psb8EG:N/E8k91zz6/tO8EG

Malware Config

Extracted

Family

marsstealer

Botnet

Default

C2

kenesrakishev.net/wp-cron.php

Targets

    • Target

      2144-67-0x0000000000400000-0x000000000043D000-memory.dmp

    • Size

      244KB

    • MD5

      8da8b1446a6a339793d343b9b720140f

    • SHA1

      95629befc809f2f9afab793be73fc179856da880

    • SHA256

      716d0e2ccb48759858322324c7224a1569075202a6f4f50a9dda8d8de9171088

    • SHA512

      f312633a7e2cbbdc0711c2bb77e17acae3e9275bbeb4e584caedac1c5e364322f61b3eeaf5f6f21bb8646135361a03fb0a24744acad965eaba137214b1a25e3d

    • SSDEEP

      3072:Um/E8k9ZjpIL+zNch12KbAwSaSgJSp8Psb8EG:N/E8k91zz6/tO8EG

    Score
    10/10

MITRE ATT&CK Matrix

Tasks