Mars Stealer (64e51712-89d6-4c91-98ac-8907eafe98c6)
Mars stealer is an improved successor of Oski Stealer, supporting stealing from current browsers and targeting crypto currencies and 2FA plugins. Mars Stealer written in ASM/C using WinApi, weight is 95 kb. Uses special techniques to hide WinApi calls, encrypts strings, collects information in the memory, supports secure SSL-connection with C&C, doesn’t use CRT, STD.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Mars Stealer (64e51712-89d6-4c91-98ac-8907eafe98c6) | Stealer | Oski Stealer (54b61c7e-8ced-4b90-a295-62102bfd4f32) | Stealer | 1 |