Overview

overview

10

Static

static

033.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    033.exe

  • Size

    630KB

  • Sample

    220701-yj2b5accf3

  • MD5

    fe8503810070e647005e051cc1f923e7

  • SHA1

    480faacd724fc8d1abe0da9e3975c6f7553d0166

  • SHA256

    aeaff06fcb7f3389aacedaee2d7a29054a12cad6ea0c11045210966b96e3949a

  • SHA512

    7a73bc35fc3c5e822475534f6d723c67ed9b1e6d84b97e88a578b21be9320bbe5978d46c489be983d06ff2fa6b6e468c3d53e04409c4eebdcf5fffa24510c4d7

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

deniedfight.com:80

Targets

    • Target

      033.exe

    • Size

      630KB

    • MD5

      fe8503810070e647005e051cc1f923e7

    • SHA1

      480faacd724fc8d1abe0da9e3975c6f7553d0166

    • SHA256

      aeaff06fcb7f3389aacedaee2d7a29054a12cad6ea0c11045210966b96e3949a

    • SHA512

      7a73bc35fc3c5e822475534f6d723c67ed9b1e6d84b97e88a578b21be9320bbe5978d46c489be983d06ff2fa6b6e468c3d53e04409c4eebdcf5fffa24510c4d7

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks