Overview

overview

10

Static

static

10

84f922cda5...18.exe

windows7-x64

7

84f922cda5...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84f922cda5d5b8bd158429b63e0200e6_JaffaCakes118

  • Size

    93KB

  • MD5

    84f922cda5d5b8bd158429b63e0200e6

  • SHA1

    d656b89dd604ae1d97cea5e708e7f27067558dd0

  • SHA256

    e5efcb3b829fd0787b38850c413a3e56769728f38e45ebc4e9422cb936967f9f

  • SHA512

    bd496104140aaba6eddb2efeb3307ec51666e144496c055d82ddfdb2615e700b7898389428e7224090bb39aaa93bc8b93cdea7be9d25c808f8ea1636a6bcddc0

  • SSDEEP

    1536:oWTHVn5wa8TXvqHp6kzWgDaO3C54Gf3lagvHkMTafiyVDr1lVUk3jy0:oWTHVn8TXvc4O3CFvlaSED1PPj/

Score
10/10
marsstealer

Malware Config

Extracted

Family

marsstealer

C2

http://marsstealer.com/gate.php

Signatures

  • Marsstealer family
    marsstealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 84f922cda5d5b8bd158429b63e0200e6_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    4c665f81387442ad965e3f4eba69f083


    Headers

    Imports

    Sections