General
-
Target
10A3DB9846445B8E1715802DA3FA6D91.exe
-
Size
266KB
-
Sample
210715-s27rd9tf26
-
MD5
10a3db9846445b8e1715802da3fa6d91
-
SHA1
924de616d5d427686ef1e1e08a8881a64af2f943
-
SHA256
8937fb7545cb081d8d5086671e6cf9d41295e191cf1bfaf4dd70282c056c79d1
-
SHA512
0ea770c80717eb7838c939da41010dd3c479e491caf53d801377cb22bc8ebc007c52cbe07ddbe3f0f389499dcfe946c84b502982de85ab71d4bcf616e184106b
Static task
static1
Behavioral task
behavioral1
Sample
10A3DB9846445B8E1715802DA3FA6D91.exe
Resource
win7v20210408
Malware Config
Extracted
fickerstealer
fickotstuk.space:80
Targets
-
-
Target
10A3DB9846445B8E1715802DA3FA6D91.exe
-
Size
266KB
-
MD5
10a3db9846445b8e1715802da3fa6d91
-
SHA1
924de616d5d427686ef1e1e08a8881a64af2f943
-
SHA256
8937fb7545cb081d8d5086671e6cf9d41295e191cf1bfaf4dd70282c056c79d1
-
SHA512
0ea770c80717eb7838c939da41010dd3c479e491caf53d801377cb22bc8ebc007c52cbe07ddbe3f0f389499dcfe946c84b502982de85ab71d4bcf616e184106b
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-