Extracted

• • Target

    8a29bcbf03060ef20fc961aa70d4befcad90449cf6c957d758dbbd0fb78af57e.exe

  • Size

    504KB

  • MD5

    0a64aeba3831090941ec8bdc233b8f5f

  • SHA1

    714d910aee7b092440552922c00c07149963e99b

  • SHA256

    8a29bcbf03060ef20fc961aa70d4befcad90449cf6c957d758dbbd0fb78af57e

  • SHA512

    fa1e38cbbfe3a281ed6fc43e8c541b64042ed0037879dd9b3a870e38c4cd4f425906003fa704a613ebeb9523cea8e59df800c39ded6bb954e93eccccb3fdf793

  • SSDEEP

    6144:p/VPiKpzTdVJgQ0YkCUfc9h0RPsjyOs9d/MIXmzVKLzmmXAqXaW0rLFb56dpLN47:XHJTLidCr9hOPuJwZORKnm8AqXaW0rN3

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2