General

  • Target

    2156-0-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • MD5

    26d0997f056ca69e037bb2ef6a8a3fe3

  • SHA1

    77daeb877e323afd2c14d4187981ef1fbb4430ff

  • SHA256

    51154756f044e64aed965d1e8b2e540da1f34d87763fd59b916cf389d120b75b

  • SHA512

    68c228616b1ea1220560aab4aecf98b5dc0a89286cf8548864c3fcd2afe95d547cf0361e5ba7251b13e01bbcf1f4e22465b4e856214639587b9cde72614b5760

  • SSDEEP

    3072:Um/E8k9ZjpIn+zNch12KbAwSaSwJSp8sb8EG:N/E8k91rz6/tW8EG

Score
10/10

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Signatures

  • Marsstealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2156-0-0x0000000000400000-0x000000000043D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections