Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Mars Steal...der.7z
windows11-21h2-x64
1Win32.Mars...nu.exe
windows11-21h2-x64
3Win32.Mars...PC.exe
windows11-21h2-x64
7Win32.Mars...DME.md
windows11-21h2-x64
3Win32.Mars...v3.rar
windows11-21h2-x64
1mars/panel...rd.php
windows11-21h2-x64
3mars/panel/footer.php
windows11-21h2-x64
3mars/panel/grab.php
windows11-21h2-x64
3mars/panel/header.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ut.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel/loader.php
windows11-21h2-x64
3mars/panel/login.php
windows11-21h2-x64
3mars/panel/logs.js
windows11-21h2-x64
3mars/panel/marker.php
windows11-21h2-x64
3mars/panel...gs.php
windows11-21h2-x64
3mars/publi...l3.dll
windows11-21h2-x64
3mars/publi...ue.dll
windows11-21h2-x64
3mars/publi...40.dll
windows11-21h2-x64
3mars/public/nss3.dll
windows11-21h2-x64
3mars/publi...n3.dll
windows11-21h2-x64
3mars/publi...e3.dll
windows11-21h2-x64
3mars/publi...40.dll
windows11-21h2-x64
3plugins_manual.txt
windows11-21h2-x64
3Analysis
-
max time kernel
239s -
max time network
249s -
platform
windows11-21h2_x64 -
resource
win11-20250217-en -
resource tags
arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system -
submitted
18/02/2025, 17:52
Behavioral task
behavioral1
Sample
Mars Stealer Builder.7z
Resource
win11-20250217-en
Behavioral task
behavioral2
Sample
Win32.MarsStealer/Mars-Stealer-main/MarsStealer_Menu.exe
Resource
win11-20250217-en
Behavioral task
behavioral3
Sample
Win32.MarsStealer/Mars-Stealer-main/Mars_Stealer_cracked_by_LLCPPC.exe
Resource
win11-20250218-en
Behavioral task
behavioral4
Sample
Win32.MarsStealer/Mars-Stealer-main/README.md
Resource
win11-20250217-en
Behavioral task
behavioral5
Sample
Win32.MarsStealer/Mars-Stealer-main/mars_panel_v3.rar
Resource
win11-20250217-en
Behavioral task
behavioral6
Sample
mars/panel/dashboard.php
Resource
win11-20250217-en
Behavioral task
behavioral7
Sample
mars/panel/footer.php
Resource
win11-20250217-en
Behavioral task
behavioral8
Sample
mars/panel/grab.php
Resource
win11-20250217-en
Behavioral task
behavioral9
Sample
mars/panel/header.php
Resource
win11-20250217-en
Behavioral task
behavioral10
Sample
mars/panel/includes/dashboardactions.php
Resource
win11-20250217-en
Behavioral task
behavioral11
Sample
mars/panel/includes/dashboardload.php
Resource
win11-20250217-en
Behavioral task
behavioral12
Sample
mars/panel/includes/grabactions.php
Resource
win11-20250217-en
Behavioral task
behavioral13
Sample
mars/panel/includes/grabload.php
Resource
win11-20250217-en
Behavioral task
behavioral14
Sample
mars/panel/includes/loaderactions.php
Resource
win11-20250217-en
Behavioral task
behavioral15
Sample
mars/panel/includes/loaderload.php
Resource
win11-20250218-en
Behavioral task
behavioral16
Sample
mars/panel/includes/logout.php
Resource
win11-20250217-en
Behavioral task
behavioral17
Sample
mars/panel/includes/markeractions.php
Resource
win11-20250217-en
Behavioral task
behavioral18
Sample
mars/panel/includes/markerload.php
Resource
win11-20250217-en
Behavioral task
behavioral19
Sample
mars/panel/includes/settingsactions.php
Resource
win11-20250217-en
Behavioral task
behavioral20
Sample
mars/panel/loader.php
Resource
win11-20250217-en
Behavioral task
behavioral21
Sample
mars/panel/login.php
Resource
win11-20250217-en
Behavioral task
behavioral22
Sample
mars/panel/logs.js
Resource
win11-20250217-en
Behavioral task
behavioral23
Sample
mars/panel/marker.php
Resource
win11-20250217-en
Behavioral task
behavioral24
Sample
mars/panel/settings.php
Resource
win11-20250217-en
Behavioral task
behavioral25
Sample
mars/public/freebl3.dll
Resource
win11-20250217-en
Behavioral task
behavioral26
Sample
mars/public/mozglue.dll
Resource
win11-20250217-en
Behavioral task
behavioral27
Sample
mars/public/msvcp140.dll
Resource
win11-20250217-en
Behavioral task
behavioral28
Sample
mars/public/nss3.dll
Resource
win11-20250217-en
Behavioral task
behavioral29
Sample
mars/public/softokn3.dll
Resource
win11-20250217-en
Behavioral task
behavioral30
Sample
mars/public/sqlite3.dll
Resource
win11-20250218-en
Behavioral task
behavioral31
Sample
mars/public/vcruntime140.dll
Resource
win11-20250217-en
Behavioral task
behavioral32
Sample
plugins_manual.txt
Resource
win11-20250217-en
General
-
Target
Mars Stealer Builder.7z
-
Size
2.8MB
-
MD5
9adaa92c49ce7b760fe9804148502b1d
-
SHA1
9c7ff83f124817589dc9e45f9e55c6fbfb6e1166
-
SHA256
dac651edd381388ce17e6c5a7c5f41c66a42530e6ce82e58745adbd3c2570b14
-
SHA512
00151d77df0cee260dadb95dd53e08ca0e7aef9e6f6668ddc439f5a138f263a957aed80431407448442eacf9b9cb4f02b98c9c4a4420e012496b2023861adc1f
-
SSDEEP
49152:7ZgKH7FFOKPETXqzZIwhMMJeBsWG9gnxFYMtZaw+mYokRTcUe6mH:7ZfH7nEUGke+WGynTX+73RAUeF
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1976 7zFM.exe Token: 35 1976 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1976 7zFM.exe