General

  • Target

    8996579058ec9c3a04bd2496bd1807da60fb38c2ed8408c626c5686119cdc8e3.exe

  • Size

    3.4MB

  • Sample

    240416-z8f8xsda23

  • MD5

    82132dee9a07a607146d757091782517

  • SHA1

    6b74a77a35f5e60d94541fdc49b63716d0224e46

  • SHA256

    8996579058ec9c3a04bd2496bd1807da60fb38c2ed8408c626c5686119cdc8e3

  • SHA512

    4814c9e8a1c536c05abf72e0c83e58e2632a9b5a0248b295bb7752810634549d7191d152949bf7e433221b87c40858679c14cdaacb1f75b38ca4b97ff1a833b4

  • SSDEEP

    12288:hFyN37FMCwa/5zCoehaSiNM5JWFnOVyVI:jqADNqPC

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Targets

    • Target

      8996579058ec9c3a04bd2496bd1807da60fb38c2ed8408c626c5686119cdc8e3.exe

    • Size

      3.4MB

    • MD5

      82132dee9a07a607146d757091782517

    • SHA1

      6b74a77a35f5e60d94541fdc49b63716d0224e46

    • SHA256

      8996579058ec9c3a04bd2496bd1807da60fb38c2ed8408c626c5686119cdc8e3

    • SHA512

      4814c9e8a1c536c05abf72e0c83e58e2632a9b5a0248b295bb7752810634549d7191d152949bf7e433221b87c40858679c14cdaacb1f75b38ca4b97ff1a833b4

    • SSDEEP

      12288:hFyN37FMCwa/5zCoehaSiNM5JWFnOVyVI:jqADNqPC

    • Mars Stealer

      An infostealer written in C++ based on other infostealers.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks