Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Mars Steal...der.7z
windows11-21h2-x64
1Win32.Mars...nu.exe
windows11-21h2-x64
3Win32.Mars...PC.exe
windows11-21h2-x64
7Win32.Mars...DME.md
windows11-21h2-x64
3Win32.Mars...v3.rar
windows11-21h2-x64
1mars/panel...rd.php
windows11-21h2-x64
3mars/panel/footer.php
windows11-21h2-x64
3mars/panel/grab.php
windows11-21h2-x64
3mars/panel/header.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ut.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel...ad.php
windows11-21h2-x64
3mars/panel...ns.php
windows11-21h2-x64
3mars/panel/loader.php
windows11-21h2-x64
3mars/panel/login.php
windows11-21h2-x64
3mars/panel/logs.js
windows11-21h2-x64
3mars/panel/marker.php
windows11-21h2-x64
3mars/panel...gs.php
windows11-21h2-x64
3mars/publi...l3.dll
windows11-21h2-x64
3mars/publi...ue.dll
windows11-21h2-x64
3mars/publi...40.dll
windows11-21h2-x64
3mars/public/nss3.dll
windows11-21h2-x64
3mars/publi...n3.dll
windows11-21h2-x64
3mars/publi...e3.dll
windows11-21h2-x64
3mars/publi...40.dll
windows11-21h2-x64
3plugins_manual.txt
windows11-21h2-x64
3Analysis
-
max time kernel
243s -
max time network
255s -
platform
windows11-21h2_x64 -
resource
win11-20250217-en -
resource tags
arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system -
submitted
18/02/2025, 17:52
Behavioral task
behavioral1
Sample
Mars Stealer Builder.7z
Resource
win11-20250217-en
Behavioral task
behavioral2
Sample
Win32.MarsStealer/Mars-Stealer-main/MarsStealer_Menu.exe
Resource
win11-20250217-en
Behavioral task
behavioral3
Sample
Win32.MarsStealer/Mars-Stealer-main/Mars_Stealer_cracked_by_LLCPPC.exe
Resource
win11-20250218-en
Behavioral task
behavioral4
Sample
Win32.MarsStealer/Mars-Stealer-main/README.md
Resource
win11-20250217-en
Behavioral task
behavioral5
Sample
Win32.MarsStealer/Mars-Stealer-main/mars_panel_v3.rar
Resource
win11-20250217-en
Behavioral task
behavioral6
Sample
mars/panel/dashboard.php
Resource
win11-20250217-en
Behavioral task
behavioral7
Sample
mars/panel/footer.php
Resource
win11-20250217-en
Behavioral task
behavioral8
Sample
mars/panel/grab.php
Resource
win11-20250217-en
Behavioral task
behavioral9
Sample
mars/panel/header.php
Resource
win11-20250217-en
Behavioral task
behavioral10
Sample
mars/panel/includes/dashboardactions.php
Resource
win11-20250217-en
Behavioral task
behavioral11
Sample
mars/panel/includes/dashboardload.php
Resource
win11-20250217-en
Behavioral task
behavioral12
Sample
mars/panel/includes/grabactions.php
Resource
win11-20250217-en
Behavioral task
behavioral13
Sample
mars/panel/includes/grabload.php
Resource
win11-20250217-en
Behavioral task
behavioral14
Sample
mars/panel/includes/loaderactions.php
Resource
win11-20250217-en
Behavioral task
behavioral15
Sample
mars/panel/includes/loaderload.php
Resource
win11-20250218-en
Behavioral task
behavioral16
Sample
mars/panel/includes/logout.php
Resource
win11-20250217-en
Behavioral task
behavioral17
Sample
mars/panel/includes/markeractions.php
Resource
win11-20250217-en
Behavioral task
behavioral18
Sample
mars/panel/includes/markerload.php
Resource
win11-20250217-en
Behavioral task
behavioral19
Sample
mars/panel/includes/settingsactions.php
Resource
win11-20250217-en
Behavioral task
behavioral20
Sample
mars/panel/loader.php
Resource
win11-20250217-en
Behavioral task
behavioral21
Sample
mars/panel/login.php
Resource
win11-20250217-en
Behavioral task
behavioral22
Sample
mars/panel/logs.js
Resource
win11-20250217-en
Behavioral task
behavioral23
Sample
mars/panel/marker.php
Resource
win11-20250217-en
Behavioral task
behavioral24
Sample
mars/panel/settings.php
Resource
win11-20250217-en
Behavioral task
behavioral25
Sample
mars/public/freebl3.dll
Resource
win11-20250217-en
Behavioral task
behavioral26
Sample
mars/public/mozglue.dll
Resource
win11-20250217-en
Behavioral task
behavioral27
Sample
mars/public/msvcp140.dll
Resource
win11-20250217-en
Behavioral task
behavioral28
Sample
mars/public/nss3.dll
Resource
win11-20250217-en
Behavioral task
behavioral29
Sample
mars/public/softokn3.dll
Resource
win11-20250217-en
Behavioral task
behavioral30
Sample
mars/public/sqlite3.dll
Resource
win11-20250218-en
Behavioral task
behavioral31
Sample
mars/public/vcruntime140.dll
Resource
win11-20250217-en
Behavioral task
behavioral32
Sample
plugins_manual.txt
Resource
win11-20250217-en
General
-
Target
Win32.MarsStealer/Mars-Stealer-main/mars_panel_v3.rar
-
Size
2.8MB
-
MD5
33cba58a463fd46eae9b462cae08c297
-
SHA1
7f760791cba43a57ebda55d150bff646f400eb1e
-
SHA256
527e3c94fdb8f8a86dc6051c0c4fda957aa2ccc74ce58f2f9396c1522fe2ea7b
-
SHA512
b0db521202f3c39b29bd516f8f55c91cf6585e8716704db531c0e88de8089f677f02850623ecfc976e7efc042922f97714b9c149c216aae05f46de1ba79d3180
-
SSDEEP
49152:/V85KX+TFCNl+uo/BFGtOPLAZSrSSxORG1D1xgEEoRfsaHtpmHpMrb5sRJb:9Oq+TQ/o/BCOcsSSxuYTg8RJCHcb5kJb
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2856 7zFM.exe Token: 35 2856 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2856 7zFM.exe