General

  • Target
    Mars Stealer Builder.7z
  • Size 2.8MB
  • Sample250218-wfsjpsvkhv
  • SHA256 dac651edd381388ce17e6c5a7c5f41c66a42530e6ce82e58745adbd3c2570b14
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      Mars Stealer Builder.7z
    • Size 2.8MB
    • SHA256 dac651edd381388ce17e6c5a7c5f41c66a42530e6ce82e58745adbd3c2570b14
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Win32.MarsStealer/Mars-Stealer-main/MarsStealer_Menu.exe
    • Size 3KB
    • SHA256 e506ea953b9f457490a0db0cccf16a6b9c1f159da5769853a6eb20e2d3d542d7
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Win32.MarsStealer/Mars-Stealer-main/Mars_Stealer_cracked_by_LLCPPC.exe
    • Size 93KB
    • SHA256 9ee5f68ca23f797de0d152e7b782832414f43ce8ea9e1578c870680aeac8930d
    • MD5 SHA1 SHA512 SSDEEP
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Target
      Win32.MarsStealer/Mars-Stealer-main/README.md
    • Size 133B
    • SHA256 2130af4bc01bac1bf21fce11768c158ec09a9506b97f16d2a2c972a4ab727bca
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Win32.MarsStealer/Mars-Stealer-main/mars_panel_v3.rar
    • Size 2.8MB
    • SHA256 527e3c94fdb8f8a86dc6051c0c4fda957aa2ccc74ce58f2f9396c1522fe2ea7b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      mars/panel/dashboard.php
    • Size 37KB
    • SHA256 ba37e2fdb2b893de1c2db65572d2789cfb1079ca26e719a95d56ef3832fed741
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/footer.php
    • Size 85B
    • SHA256 3816d9f153c2380e009fcf911da0d41cdbd2495bb47e0e04e87d2997a34ebdf6
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/grab.php
    • Size 6KB
    • SHA256 436828e4ab1ea879c6d724035ad26fe3db8a1402e13ddd477e3d369715b7e88a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/header.php
    • Size 5KB
    • SHA256 ad62b59cde287345752d7ec3a0afab228d1ebfdc7af6d090deebe944833415df
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/includes/dashboardactions.php
    • Size 325B
    • SHA256 c166eb24c0313ce21f028765caed483650eeff9db59c34243b3fe933999deb0e
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/dashboardload.php
    • Size 1KB
    • SHA256 6cc4bd0ae13414b5e51b2201c7cacf36e9aec0dccbc5a5a5adccc47719e0ad02
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/grabactions.php
    • Size 1KB
    • SHA256 e1cfda4fcd37db567c37f12f4e31086bc6dd5ba5918249aeddac0ce21012581e
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/grabload.php
    • Size 1KB
    • SHA256 1abb23da29e1b5df3df439694454be89e8b800163fed9a0942ed8170491d8ec7
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/loaderactions.php
    • Size 1KB
    • SHA256 22339c64f2fa8ad2678948a46be3225415cdaf330c3a9c79c4630810391a6545
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/loaderload.php
    • Size 1KB
    • SHA256 775068a1549412efdeee6d3e1746927b41a1535f619c118b7cdb009f1ff276cb
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/logout.php
    • Size 112B
    • SHA256 77853ee80bc5ed90becfbae3b00d2b8088985e0933a3bf389255f44b947223ff
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/markeractions.php
    • Size 1KB
    • SHA256 34328b0a814e719b432fd93390ea9d97853e31ece2aabba0ffe124535f58e5c7
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/markerload.php
    • Size 1KB
    • SHA256 cb625640c3a42be167783d026f07850f8e09fb850b8c8da719eda03df8dac500
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/includes/settingsactions.php
    • Size 969B
    • SHA256 168ea78049c70511701e7bc026c77c1870386714e4eb0abb74c60c5c4e4fe59c
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/panel/loader.php
    • Size 8KB
    • SHA256 a168504c209c867ea5ab73e523d7fde859be2b7f0ca78a2222ff31f6efffd4a2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/login.php
    • Size 4KB
    • SHA256 8281186baa9b3a1be82eb6ec781bdece21edda998f808480a9087ab2876b420b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/logs.php
    • Size 11KB
    • SHA256 7a2d7f9211c5e30c90ee0aeb4d61647700ba932323b8eff40c95abd998fa2593
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/marker.php
    • Size 4KB
    • SHA256 37a917da464a9a0d5d07fd564c07ab211a77ae0c19e1410f6938d1ce92424e1e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/panel/settings.php
    • Size 3KB
    • SHA256 5a5a1ab50f3ff3edc6594e80f8327ae4a7251c723ed5dc0a093b93f04dfe3f3c
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      mars/public/freebl3.dll
    • Size 326KB
    • SHA256 a770ecba3b08bbabd0a567fc978e50615f8b346709f8eb3cfacf3faab24090ba
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/public/mozglue.dll
    • Size 133KB
    • SHA256 3fe6b1c54b8cf28f571e0c5d6636b4069a8ab00b4f11dd842cfec00691d0c9cd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/public/msvcp140.dll
    • Size 429KB
    • SHA256 334e69ac9367f708ce601a6f490ff227d6c20636da5222f148b25831d22e13d4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/public/nss3.dll
    • Size 1.2MB
    • SHA256 e2935b5b28550d47dc971f456d6961f20d1633b4892998750140e0eaa9ae9d78
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/public/softokn3.dll
    • Size 141KB
    • SHA256 43536adef2ddcc811c28d35fa6ce3031029a2424ad393989db36169ff2995083
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/public/sqlite3.dll
    • Size 630KB
    • SHA256 16574f51785b0e2fc29c2c61477eb47bb39f714829999511dc8952b43ab17660
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      mars/public/vcruntime140.dll
    • Size 81KB
    • SHA256 c40bb03199a2054dabfc7a8e01d6098e91de7193619effbd0f142a7bf031c14d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      plugins_manual.txt
    • Size 8KB
    • SHA256 d8adf295702fb08eb32020de7b156b3dcd2c49992ab18d4776556a6566256781
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

arkei
Score
10/10

behavioral1

Score
1/10

behavioral2

discovery
Score
3/10

behavioral3

discoveryspywarestealer
Score
7/10

behavioral4

Score
3/10

behavioral5

Score
1/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

execution
Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

Score
3/10