Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6fc629fbf3...61.exe

windows7-x64

10

6fc629fbf3...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361.zip

  • Size

    285KB

  • Sample

    221114-lqnndsbf6t

  • MD5

    1615e4e6c9c61609bae00344c2e03d0b

  • SHA1

    f52448c01bcf308f7c20d4874b57b8c4028cda83

  • SHA256

    947bbee2817ee45e71b7aa0085e505146b725ead646a5b6d19125cc11d2c45f1

  • SHA512

    75fb324cc058bc78c9c0369d5d2603d30ab27620d6bd75ead21a32e23b6fe14d78c08666076ddf153b475924dcbe1f1fd4f107049cc733c4648c82da20b44549

  • SSDEEP

    6144:g2I/8rp2yEj59alZpDnzPQoemquD3UKU9RZ2hRjAw0JBW2Wg9N:Es2yE9sZpDDQo9quLUXRInYJZW2N

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

game2030.site:80

Targets

    • Target

      6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361.exe

    • Size

      556KB

    • MD5

      0e7d5f23ce2fdc3320d257a952444609

    • SHA1

      2b421eb8c9e27b5bdd113d1f45054d8eafa48726

    • SHA256

      6fc629fbf3a2155e080a6c65fde3db4fe84c3e818c20a3b4b9fb39242cbb2361

    • SHA512

      33b168293d0e192df369d7d4afff1915038179803782c4225a5cd6fcb26405eceba7c93045d27acbecbc4f6d9af0cc415a460988d95f207f7379c043e7495332

    • SSDEEP

      6144:IaqPFf30Cjo4qbLoa3+iAn9z/ax02ngRlyMnx1CByTqsV90MW0rLAb56dpLN4XQq:BqVjZq/ow+DnoS2ngRlh1CByTQMW0rw3

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks