Extracted

• • Target

    58433f617218ea615f48b5670b6ac8cbbe579e6c71cbb9a4a127f02d8ccb52e6.exe

  • Size

    445KB

  • MD5

    4ba007b10190fdae6ab529ead92ac85e

  • SHA1

    12a3b473e99b258dbf3692467d960ab3b421c71c

  • SHA256

    58433f617218ea615f48b5670b6ac8cbbe579e6c71cbb9a4a127f02d8ccb52e6

  • SHA512

    9b9abcfc8ec3b8a13bd33c5f3fccd44290dd8ab319e23e36ae5a9ce6c98fed50c0b8fbabdcd2ebaf1ad2dfff822eb0be6d44a0b5de2ac332bcb6faa55ac613ee

  • SSDEEP

    6144:7h43lPnBElcXJaq5sWMZVuV1DqUPb49Zva5AFTcK4yJB1S949g7ITsqeewVf6XOO:7OB8cXxuWPqR9ZvwAFTB4yJTt9g7RWl

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2