Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

2a07d19fd3...57.exe

windows7-x64

10

2a07d19fd3...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a07d19fd34df0e33413d8bfebc26b39c0f86f7a600f869bdda60ecd5976d057.zip

  • Size

    289KB

  • Sample

    221114-lqm2vsge56

  • MD5

    a8220e0f343ac5616ae41bfc59e7bf83

  • SHA1

    e77b521ac3e239e6552a0128c9f8994b0395441d

  • SHA256

    00402f5fdc898df38402e3ed5e002c1be91cc58f285058c1189423299a5358a7

  • SHA512

    56fbb38f6d2e4bc643487995d76053d7673086c37489ffdf348dba634ab1475a85bc171e5552332936bb4f8b87c6c846ca1c0285dba61da7fa54e80a42830dde

  • SSDEEP

    6144:5XPcfSxcUd4RlU42mmfcN2JKHCpdHImtOldibcgWbpNGobwa9Mym:tqSxcK42mmcsp2l5giWfa9M5

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

mistral3.xyz:80

Targets

    • Target

      2a07d19fd34df0e33413d8bfebc26b39c0f86f7a600f869bdda60ecd5976d057.exe

    • Size

      509KB

    • MD5

      80c53a6f0272c72891d561c3d17ea428

    • SHA1

      6788c017a9e366d2c8c295f9b4326a3b53f1071c

    • SHA256

      2a07d19fd34df0e33413d8bfebc26b39c0f86f7a600f869bdda60ecd5976d057

    • SHA512

      99468d2ff130f0541b48d3fed815e7af5892302250df2cc268ae9b401eda1e6298b5df85a92e51c765c4430a6ddf8935cf274f1c79e6f5f7e291e5c8d04ab522

    • SSDEEP

      12288:ERGZnX2cMf1Idc+ihUs5I5Npf1YV71EW0rF3:NnGcD3uU+I5j1YV5y3

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks