marsstealer | b7737850b4f9843c60a23ca39b81fecdb60a04fbcd5839326f854f0a092f95c5 | Triage

Submit
Reports

Overview

overview

Static

static

3

Gammadyne Mailer.exe

windows10-1703-x64

Sharing

General

Target

Gammadyne Mailer.exe
Size

668KB
Sample

240404-bcbrkaad43
MD5

1ff8f5b71d19c4faffa31dfdc21fd263
SHA1

cb42386f7fd958812ffcfff9b0c107158eca5994
SHA256

b7737850b4f9843c60a23ca39b81fecdb60a04fbcd5839326f854f0a092f95c5
SHA512

74a1e83bc9a03ffadf78c18a7bb056724c17b6dce3e85ed214282ca38adb47d52a3f8c48c82a1b9c25014c7739f4dcd18faf3a6b81bf90247f6d3086d16698fa
SSDEEP

12288:jkZbvRx3JGXdvLI/tt5AzzCRlr+RGc6xyArqg5GnD8LVduHRvBHnVr7MHWrgcli7:xRWy68/ghD7q

Score

10^/10

marsstealer default stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Gammadyne Mailer.exe

Resource

win10-20240221-en

marsstealer default stealer

windows10-1703-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Targets

- Target
  
  Gammadyne Mailer.exe
- Size
  
  668KB
- MD5
  
  1ff8f5b71d19c4faffa31dfdc21fd263
- SHA1
  
  cb42386f7fd958812ffcfff9b0c107158eca5994
- SHA256
  
  b7737850b4f9843c60a23ca39b81fecdb60a04fbcd5839326f854f0a092f95c5
- SHA512
  
  74a1e83bc9a03ffadf78c18a7bb056724c17b6dce3e85ed214282ca38adb47d52a3f8c48c82a1b9c25014c7739f4dcd18faf3a6b81bf90247f6d3086d16698fa
- SSDEEP
  
  12288:jkZbvRx3JGXdvLI/tt5AzzCRlr+RGc6xyArqg5GnD8LVduHRvBHnVr7MHWrgcli7:xRWy68/ghD7q
Score

10^/10

marsstealer default stealer
- Mars Stealer
  An infostealer written in C++ based on other infostealers.
  stealer marsstealer
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

marsstealerdefaultstealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.