General

  • Target

    8524e36f1291cd8eab742484784d8d55

  • Size

    93KB

  • MD5

    8524e36f1291cd8eab742484784d8d55

  • SHA1

    45362afbaa0ceb721d0139300a45f9f0add0c044

  • SHA256

    f1d4d4a12d43f6e2c8cb6165e8b11416f2fa4deda89e54f6713cf79cdf54b9fd

  • SHA512

    026d84379d81be4cbc02a2e41b9ab09f2cb5d04b726b1c50f79ad61a692a4aaa174c9aa04c76d3af166347cd20ab9849043a7b33ba967f274d38f98ae9c390c6

  • SSDEEP

    1536:oWTHVn5wa8TXvqHp6kzWgDaO3C54Gf3lagvHkMTafiyVDr1lVU93jy0:oWTHVn8TXvc4O3CFvlaSED1PIj/

Score
10/10

Malware Config

Extracted

Family

marsstealer

C2

f0575062.xsph.ru/gate.php%20

Signatures

  • Marsstealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8524e36f1291cd8eab742484784d8d55
    .exe windows:5 windows x86 arch:x86

    4c665f81387442ad965e3f4eba69f083


    Headers

    Imports

    Sections