General

  • Target

    2352-0-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    94af550c348bbdec529a61ad50ef3dc7

  • SHA1

    9cbad1dc4832762be6923cc85da68c5b3187c3f2

  • SHA256

    3b4ca7975a3e5f1aa50523fcf36dfdd3fd2d3622f07bcafb334c71351e1ae9ae

  • SHA512

    cefc01f3327133fe9767b00c9f203c1d5938c4a2d3eeded82acdeaf06af8d2f3e540eb51785008a67341512b26933193f492a23f9c45119695cfb39f4e07542c

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaSSJSp8xb8EG:N/E8k91zz6/tF8EG

Score
10/10

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Signatures

  • Marsstealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2352-0-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections