Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    243s
  • max time network
    255s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250217-en
  • resource tags

    arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    18/02/2025, 17:52

General

  • Target

    Win32.MarsStealer/Mars-Stealer-main/mars_panel_v3.rar

  • Size

    2.8MB

  • MD5

    33cba58a463fd46eae9b462cae08c297

  • SHA1

    7f760791cba43a57ebda55d150bff646f400eb1e

  • SHA256

    527e3c94fdb8f8a86dc6051c0c4fda957aa2ccc74ce58f2f9396c1522fe2ea7b

  • SHA512

    b0db521202f3c39b29bd516f8f55c91cf6585e8716704db531c0e88de8089f677f02850623ecfc976e7efc042922f97714b9c149c216aae05f46de1ba79d3180

  • SSDEEP

    49152:/V85KX+TFCNl+uo/BFGtOPLAZSrSSxORG1D1xgEEoRfsaHtpmHpMrb5sRJb:9Oq+TQ/o/BCOcsSSxuYTg8RJCHcb5kJb

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Win32.MarsStealer\Mars-Stealer-main\mars_panel_v3.rar"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads