Extracted

• • Target

    12bb8ed4385c0e52f3e43b54a87f1ce80c829e3de44e1586dfabfedccf67ec2b.exe

  • Size

    434KB

  • MD5

    b73194a81a9a57c97c6615faef5c4415

  • SHA1

    68c6474188f587dcc146898543e564566b646d82

  • SHA256

    12bb8ed4385c0e52f3e43b54a87f1ce80c829e3de44e1586dfabfedccf67ec2b

  • SHA512

    a91655017021a2d99c395a61eeab50074b9cc4ef98062a6c67e9571afac3cdd1df5ca2cb9b5e6db89e867fc9cb1a7a4abf71e268a2009e9556539604fef6c14c

  • SSDEEP

    6144:9BshZeNLwDLlKC0uv292QxV8bKkSwnrYAYMW0rLAb56dpLN4XQKJ3:rAsNUKW0TxmtrzYMW0rw3

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2