Extracted

• • Target

    8996579058ec9c3a04bd2496bd1807da60fb38c2ed8408c626c5686119cdc8e3.exe

  • Size

    3.4MB

  • MD5

    82132dee9a07a607146d757091782517

  • SHA1

    6b74a77a35f5e60d94541fdc49b63716d0224e46

  • SHA256

    8996579058ec9c3a04bd2496bd1807da60fb38c2ed8408c626c5686119cdc8e3

  • SHA512

    4814c9e8a1c536c05abf72e0c83e58e2632a9b5a0248b295bb7752810634549d7191d152949bf7e433221b87c40858679c14cdaacb1f75b38ca4b97ff1a833b4

  • SSDEEP

    12288:hFyN37FMCwa/5zCoehaSiNM5JWFnOVyVI:jqADNqPC

  Score

  10^/10

  marsstealerdefaultstealer

  • Mars Stealer

    An infostealer written in C++ based on other infostealers.

    stealermarsstealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2