Overview

overview

10

Static

static

10

c6cd6c2111...2b.exe

windows7-x64

6

c6cd6c2111...2b.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6cd6c21110c3cedb4381797c5bfeb8e117b389ecf2a7b43be8375e6b5a7c82b.zip

  • Size

    138KB

  • Sample

    221114-lqnndsge59

  • MD5

    50c6bfc97418bc2453c374bedd00c99b

  • SHA1

    dbd5b8bbf0a9d0d3ffa8b877ca33e1affa6c71be

  • SHA256

    7890cef1cbc4131beab18053c840bed8a567a8842ba03cbb3baca9042c51d1bb

  • SHA512

    ed0608af03f65f4161591632a77bf646e0a4783b1dc623f82dccce357dd7f7d04fda9d5cdd5f5f9ec693c50227cda8d786657b158abd56176573bf4ed806e938

  • SSDEEP

    3072:OyQpxOGwMW6Y0H9Tl2cQWCoZhc2BniHe4ZO4kX42zNG2Z:OyaKMW6Yq2cQWCmzncZO4ko2pbZ

Score
10/10
fickerstealer

Malware Config

Extracted

Family

fickerstealer

C2

217.12.201.112:80

Targets

    • Target

      c6cd6c21110c3cedb4381797c5bfeb8e117b389ecf2a7b43be8375e6b5a7c82b.exe

    • Size

      266KB

    • MD5

      f4c3e3416fb1f06dd013e9b05ed4c059

    • SHA1

      2ed500f9f4d195adc475eb8f4bf84ddae04055d6

    • SHA256

      c6cd6c21110c3cedb4381797c5bfeb8e117b389ecf2a7b43be8375e6b5a7c82b

    • SHA512

      55e0c14761a028eb1565afea9a1462c8e9b395c433095384d46318401525cfd2c49d2e2181f4d69852ce15b0c07c2bf0144a03405ab45013fba1f6744ef5465b

    • SSDEEP

      6144:IKe6v0FTfwyRHsgaOSUvsyurPsq1fjXOP:I6v044aXUvQa

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks