General

  • Target

    MarsStealerBuilder.h.7z

  • Size

    9.3MB

  • Sample

    241213-1dyp6ayngx

  • MD5

    17f119c13ca5c322d8f831edfba96ae4

  • SHA1

    221ed0a212f3350556d148fba4fd48f671fb775e

  • SHA256

    c1a1bab48bfb9ad7e33ad7e0eba87c6b4d8fef14573b322e906ca55266947db8

  • SHA512

    7b8fe9e0bdf46bb55e121837619911938cb590b8293d760cbd130a5edc2508e707e05871bece7cc8a69b0b10e05afaf8b0dd32f693f4d6be23f1cf3ea958427c

  • SSDEEP

    196608:VFi8/bA+1Rm3uBrv2pW+zIAiz0BVvvs7V/RY7rn+3W3qKrK2KRZnTFhl:VF1/kEdkFA86/RY7rn/KRZnTV

Malware Config

Extracted

Family

marsstealer

Botnet

Default

Targets

    • Target

      Mars Stealer Builder.h/MarsStealer8_cracked_by_LLCPPC.exe

    • Size

      159KB

    • MD5

      caa1ddfbbe03a5a5daeb718605daacb0

    • SHA1

      1dc62e3529aaafb20c3ca16697deb5cf6792d83f

    • SHA256

      fcec85746f0f2a92b1268830d6d0b075eb9080707358b93ba5fbd917b1a0a8ea

    • SHA512

      fb805afdf01603eb5af3ee8807fcd42a04e49d3a106e945fa9ab57a68a5068bdfc19a685213d3601be228dfbfae52315953e2400be9051a283f6df0923518ce7

    • SSDEEP

      3072:Um/E8k9ZjpIL+zNch12KbAwSaSbJSp8Bb8EG:N/E8k91zz6/t88EG

    • Target

      Mars Stealer Builder.h/MarsStealer_Menu.exe

    • Size

      3KB

    • MD5

      28b0510bc164a5f4950c087dd87c48de

    • SHA1

      871ea12fd8e066bbca6c15da37f130a2b3d02957

    • SHA256

      ba6bd4091ef2b54306221cf1de239ee49cd4e0fa169a35d04451888550a76b8d

    • SHA512

      1126344fad52290155f037af52cf97461f5b49956be6b04354968b0f4748f7031a4e5659121b85386f9be1ffd74f1bc6cf221e595ead1c6292b6a277bf4bcbb0

    Score
    3/10
    • Target

      mars_panel_v8/instruction.html

    • Size

      5.5MB

    • MD5

      0ba1c620dd3d1155b019fd5fe0880a4c

    • SHA1

      dcc2c441d23bc6cf20f673dab3591554c21ae539

    • SHA256

      08da84bb76202f4e9aac9843346439893dea3290b8760ccbf8b34545eeb802bf

    • SHA512

      406f16a2d576aa3be4fb4aa4710fc0bf752d40e0d232bcc715824a3e628e32b8062e8633171411e302d915e29293fe81252812381de611b7f4c4b3da1de9975c

    • SSDEEP

      49152:Dp1GwRgMJpW7yXVKP4BH9Y/vJgmcW6+pUmPVPtX2zZcXmv0oc6op2xN351apMT95:f

    Score
    3/10
    • Target

      mars_panel_v8/manul_panel.html

    • Size

      2.3MB

    • MD5

      4da0595d97fffabea58ffdb6cc493353

    • SHA1

      e5d10b384ecfea97b1ae7039aa4a5e8ff652a464

    • SHA256

      d6d3b257e3e35d9088a4051f612605c4459be0e7d5c27e687b82275331082fcf

    • SHA512

      51dcbbb1cd5c42c866f7b736e4bfa3663140bcbe6311f42d4ff57998e1ba80d32fbdd50a151ecdb2641d4860dedf05ae745b975b8d7ec3943d23dd744857dea0

    • SSDEEP

      24576:IrvtbbswNPXgPHhWsEkluvxS2t8Ga0z97owwc4JXtNrtb77WEYbBAExOSA7ii8Lh:YVSykl2c/GowwbLtbut47i56FAV2Opl

    Score
    3/10
    • Target

      mars_panel_v8/www/gate.php

    • Size

      15KB

    • MD5

      1509ab63dc7f9e724dc5ab002c6ebc7c

    • SHA1

      64732a3d94a6580a65940eca60e8e88bddf2fbae

    • SHA256

      df12ac6c6913de793c425488e367645afbf369b4c205e7b1812801f0d81d08fd

    • SHA512

      b6537a40291db47a8905327f2210288ce7bd1cd6d2299a51ba01deda411c2cfd8cb11dd183d62a646916cabb7be3841596083e4948838abac26d9a8b64614132

    • SSDEEP

      192:poK7PCqywC4MKzoLeCVPJKh3J2td7jfXBXwnKNRRxV2pgWjOiBmRgw0VN8dIX2z1:pP4wC4o7bKJJMgKNXOpgWjLION8IX2z1

    Score
    3/10
    • Target

      mars_panel_v8/www/guest/assets/js/apexcharts.min.js

    • Size

      870KB

    • MD5

      ae50ed75dbd16a56ab772663cd3bcf9c

    • SHA1

      b84fd35fd6760a8e51cb99bc3bcf8533454554e7

    • SHA256

      95483691e4771b81a36c0d4dca22a429041b96f099c88cf20619d32cf0b50c3f

    • SHA512

      f9dbc71e13977ca5e459219f52ae56e5b980fc8670f85b6693e45feae812a30b7db3f786cb157425bce5cf7c856566775c236664386b772a232382d881bd1d64

    • SSDEEP

      24576:MZWc42Ub/tahrBul5JsdKCNV7yNyoFQeUle+3qn9nZw0dpqEY3PoSTHS08txsjp9:MZWc42Ub/tahrBuZsdKCNV7yNyoFQeU/

    Score
    3/10
    • Target

      mars_panel_v8/www/guest/assets/js/jquery.analytics_dashboard.init.js

    • Size

      5KB

    • MD5

      5d1374da2b16c4f927f64010ffec2f67

    • SHA1

      38dc9fb5b6a60247688690fe9528e8138a218267

    • SHA256

      5572ba9d951867a1083adf7a5434a4ad51e3dfc50c4830cadae1c1c52702a8bd

    • SHA512

      dc337be5b4213c163141da9d42c171a49c174451132b15cad05cc87236af82374291513f3d0a3291b4f21f37124ad9504bc47190aef7e76c377268726d97714c

    • SSDEEP

      96:+v+3BDfi3iXywmJNv/0lIxEWpJdgoAdIsUSgXyHJdrHKcz/cc:+vMJ120lxwgoFsFBrB

    Score
    3/10
    • Target

      mars_panel_v8/www/guest/assets/js/jquery.min.js

    • Size

      87KB

    • MD5

      dc5e7f18c8d36ac1d3d4753a87c98d0a

    • SHA1

      c8e1c8b386dc5b7a9184c763c88d19a346eb3342

    • SHA256

      f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

    • SHA512

      6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516

    • SSDEEP

      1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/css/jquery-ui.min.html

    • Size

      279B

    • MD5

      3d94c5db6219640112a01c9f126e894f

    • SHA1

      042b019ca257c1c8f979ee8c2e13105ee2d92327

    • SHA256

      d36921d85f158a051daed4dd44ca81fc98a4b707c71f0b587a3e8df8d683f5a2

    • SHA512

      74da9160f3a50e944a922a209dda4d0a2c4b088b646e57fdf7d2e707d70594d280c89855acadd09ed4e0a1b37fe9b7d758ef7e00b3fc5290386ec1163a853f83

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/FileSaver.min.js

    • Size

      2KB

    • MD5

      bd9105ba51dccb7403a47ccaa3a5ce2e

    • SHA1

      04443006951f3e8eea14e819d89ba418cb68cf25

    • SHA256

      1433b8feb185bd8e81db7d2d1ea7330140531b72158300f8e26c98df1e853b21

    • SHA512

      7b7e6d1e18ba68f2192f8d34dd79ef0b2d1f04c2aab88d94dcac055b3168985ee9af27a50aafca000804ad922fee89b8b4f3be6ac10bf0a2ef05e6f3250cd22b

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/apexcharts.min.js

    • Size

      870KB

    • MD5

      ae50ed75dbd16a56ab772663cd3bcf9c

    • SHA1

      b84fd35fd6760a8e51cb99bc3bcf8533454554e7

    • SHA256

      95483691e4771b81a36c0d4dca22a429041b96f099c88cf20619d32cf0b50c3f

    • SHA512

      f9dbc71e13977ca5e459219f52ae56e5b980fc8670f85b6693e45feae812a30b7db3f786cb157425bce5cf7c856566775c236664386b772a232382d881bd1d64

    • SSDEEP

      24576:MZWc42Ub/tahrBul5JsdKCNV7yNyoFQeUle+3qn9nZw0dpqEY3PoSTHS08txsjp9:MZWc42Ub/tahrBuZsdKCNV7yNyoFQeU/

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/app.js

    • Size

      2KB

    • MD5

      a0f20cfc74ac290b19472ffbd89d2816

    • SHA1

      eb4f26f791b8141202f3450d417133678397e14e

    • SHA256

      87a94d989ff85416d29bdce6493accb7b5818bb2737523b8501b5f53dcd81bfb

    • SHA512

      6aa9d65489b95bb81eb246bfde5431a2abe5367b01ffee988442466e0ee070d162d3b127e0dfca0345ca0a64ec1faca72cdc21360b13cfca35f154c123eb5e95

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/bootstrap-colorpicker.min.js

    • Size

      68KB

    • MD5

      b25de4112f4968819261bb54eac4879e

    • SHA1

      bc598ae13d0d9fc50616e57ef3c5b02d1b8fd6e2

    • SHA256

      73e189f601862b2a7b51661f00160cefedb0909b53ce7f53c322aa35e2dc2db4

    • SHA512

      7c73145599273492be3d5b86144a17a2fbcdc1960910e201fa8ec4a42236df78dc6178db0ccbe2aa6052f110ed972467d823ecf4a8a9e074299f5d22314fac41

    • SSDEEP

      768:G9BusJ7Dd4ay5XFDn6aYc++xd+UKKKLJ0aINGXQuIHMvRMbxVaI2aIOxrVGP9KAB:FCcB1VA/AmLLThwcsby0ymFhe

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/bootstrap-material-datetimepicker.js

    • Size

      55KB

    • MD5

      babce5d12c88abe51fad2059c0b764cb

    • SHA1

      4269e07edc50fd29ea86c7af60fe9473d7c89bc6

    • SHA256

      d17c4df70e8b78a0511817ddb8c0cc094d26d22a39e92f73588cecbcf46650e0

    • SHA512

      bf8bf3e1647dc9a614a612bebb11d24d308815054f6e6a060191528462247d62d84ffbac5750f7b882f919a722bb870c10b46ff73b72471453e4c8b449a6127e

    • SSDEEP

      768:hK3+dzkM+XrNzPcO5sF4rVrvbdQRzkfFRRnau7q5:hzkM+XBzP7rVrvb+RQ9aUq5

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/bootstrap-maxlength.min.js

    • Size

      8KB

    • MD5

      659895aeed65ac49f0c8a85d68199341

    • SHA1

      d44b2445c9fe746383ba622faaf7f8d921fd1145

    • SHA256

      f2c6443899dc1b70aa8b4673746181df961fc0f4b996878132beec12d68ee28e

    • SHA512

      2b92ae351f708dac3707a1e29e191e0885959fced1d305d82e8a18d2524cbc457ea6d78e5448d5ce4cdd9ce15b81d252c06806f3674aec55c453aa5b7096c8ff

    • SSDEEP

      96:8v99SEaiZNwJ08UXs4cqAaAcPsdGZp+yhCiQdr0pvMuu3tDRYWQe78GXRqi:8v9QEaiZeJ08jaPIxndr0tMOWF7b

    Score
    3/10
    • Target

      mars_panel_v8/www/panel/assets/js/bootstrap.bundle.min.js

    • Size

      82KB

    • MD5

      7f389f5d2622ce2090eca7c36bcb90bc

    • SHA1

      ab27031159724e2421f6ff5c70f48e657abe9d39

    • SHA256

      8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01

    • SHA512

      89c7978e36e6076af0a17f7729ae870073fe07be88635cf4a3787e3753de0ed452b3279eb54dffd10289a86c8f25c5fadf3cac35e860805c0c0bf6e2eddbcc8a

    • SSDEEP

      768:du/iPy7+zZHVPVBNpwV7BTUB6/YLF/fB+4ed4MMAja+t+QnXLb1+uaR+orWieOJ6:deiayUYLZ83dPD3GAP6f2jX+i/Q2

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

defaultmarsstealer
Score
10/10

behavioral1

marsstealerdefaultdiscoverystealer
Score
10/10

behavioral2

marsstealerdefaultdiscoverystealer
Score
10/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10