General

  • Target

    367dfc1c97b8aea370ccdeac382f0aa480eeb889936df984d11a076abf161723

  • Size

    562KB

  • Sample

    220630-w851haaaa8

  • MD5

    82bde2ad8f5f441460b618474119d042

  • SHA1

    36a7d6ae771182a4c766e73878b54330b1dbefd3

  • SHA256

    367dfc1c97b8aea370ccdeac382f0aa480eeb889936df984d11a076abf161723

  • SHA512

    9cbe300aa9305379b1779da1fd064d9eb8ded9b387b4110baeaed84301a7608dd14ac68cf8ab0dc936dfefb4d6b3277f1049f593b0da1aefc43b36e7896b0be7

Malware Config

Extracted

Family

fickerstealer

C2

86.106.181.99:80

Targets

    • Target

      367dfc1c97b8aea370ccdeac382f0aa480eeb889936df984d11a076abf161723

    • Size

      562KB

    • MD5

      82bde2ad8f5f441460b618474119d042

    • SHA1

      36a7d6ae771182a4c766e73878b54330b1dbefd3

    • SHA256

      367dfc1c97b8aea370ccdeac382f0aa480eeb889936df984d11a076abf161723

    • SHA512

      9cbe300aa9305379b1779da1fd064d9eb8ded9b387b4110baeaed84301a7608dd14ac68cf8ab0dc936dfefb4d6b3277f1049f593b0da1aefc43b36e7896b0be7

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks