General

  • Target

    868-14-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    a72019e652833b8efa71bba132934056

  • SHA1

    6b41e83e56322dd984c123c0b79e373b7a6e756f

  • SHA256

    aa95a4bd7c6cb87df9232d7f67d19ce58936808b0256775a08a41eed039784b8

  • SHA512

    abf5db8144287ebe184dd1e155bc69276bc48f3a35d9f80939f1ebe5e066d5554cdff8c902220902d08b19c84a96676d288af77c1ac8d44fbdc0c6d80ca093b9

  • SSDEEP

    3072:Um/E8k9ZjpIn+zNch12KbAwSaSgJSp8ob8EG:N/E8k91rz6/tG8EG

Score
10/10

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Signatures

  • Marsstealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 868-14-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections