Mars Stealer Builder.7z
- SHA256 dac651edd381388ce17e6c5a7c5f41c66a42530e6ce82e58745adbd3c2570b14
Behavioral task
behavioral1
Sample
Mars Stealer Builder.7z
Resource
win10v2004-20251016-en
File was Codesigned using an insecure algorithm.
| resource |
|---|
| unpack004/mars/public/freebl3.dll |
| unpack004/mars/public/mozglue.dll |
| unpack004/mars/public/nss3.dll |
| unpack004/mars/public/softokn3.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Win32.MarsStealer/Mars-Stealer-main/MarsStealer_Menu.exe |
| unpack001/Win32.MarsStealer/Mars-Stealer-main/Mars_Stealer_cracked_by_LLCPPC.exe |
| unpack004/mars/public/sqlite3.dll |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=1, productName=Unmarked objects,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=4, id=14, version=7299,
count=10, id=175, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Nov 14, 2018
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=25305,
count=1, id=199, version=41118,
count=4, id=259, version=25305,
count=11, id=261, version=25305,
count=11, id=260, version=25305,
count=4, id=257, version=24610,
count=3, id=257, productName=VS2017 v15.4.5 build 25547, version=25547,
count=82, id=1, productName=Unmarked objects,
count=2, id=259, productName=VS2017 v15.4.5 build 25547, version=25547,
count=68, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Nov 14, 2018
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=199, version=41118,
count=14, id=259, version=25305,
count=11, id=260, version=25305,
count=4, id=257, version=25305,
count=18, id=261, version=25305,
count=9, id=257, version=24610,
count=190, id=1, productName=Unmarked objects,
count=1, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=20, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
May 25, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 25, 2017
count=2, id=239, version=40116,
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=25305,
count=192, id=1, productName=Unmarked objects,
count=9, id=259, version=25305,
count=12, id=260, version=25305,
count=22, id=261, version=25305,
count=119, id=264, version=25305,
count=1, id=256, version=25305,
count=1, id=255, version=25305,
count=1, id=258, version=25305,
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Nov 14, 2018
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=25305,
count=4, id=199, version=41118,
count=13, id=259, version=25305,
count=10, id=261, version=25305,
count=11, id=260, version=25305,
count=8, id=257, version=24610,
count=3, id=257, productName=VS2017 v15.4.5 build 25547, version=25547,
count=247, id=1, productName=Unmarked objects,
count=266, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Nov 14, 2018
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=25305,
count=2, id=259, version=25305,
count=10, id=261, version=25305,
count=11, id=260, version=25305,
count=2, id=257, version=24610,
count=3, id=257, productName=VS2017 v15.4.5 build 25547, version=25547,
count=152, id=1, productName=Unmarked objects,
count=20, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
Unsigned PE
Checks for missing Authenticode signature.
May 25, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 25, 2017
count=2, id=239, version=40116,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=16, id=260, version=25305,
count=19, id=259, version=25305,
count=4, id=261, version=25305,
count=26, id=264, version=25305,
count=1, id=256, version=25305,
count=1, id=255, version=25305,
count=1, id=258, version=25305,