Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

73d34ceec5...48.exe

windows7-x64

10

73d34ceec5...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848.zip

  • Size

    290KB

  • Sample

    221114-lqny6age62

  • MD5

    0a8582bffda86da0737d792fe40f4fa8

  • SHA1

    7c96a051b763f8c712a24a41fa52673b883c5bed

  • SHA256

    66a14689faa12b80fa66d9a8c1e1393522334594a4dac1243a83bac8c3203356

  • SHA512

    d559013981722d0b33857dd99e69a436c8be27e72e8a4ef4b18aabb66d5aaff2067719f80e16657e16b7604f0474075adb9161c71b64fe7a84b4f40b293e194f

  • SSDEEP

    6144:mLa9y1xvrgZzgvtQVAY+JYGQ1FtzVascl1cwAG6lGLhsHzrr:kUUMEvtQVAY8Q1zVasMcwatT

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

mistral3.xyz:80

Targets

    • Target

      73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848.exe

    • Size

      511KB

    • MD5

      4988a43a98b7d9c6aa7e71b8a8919fd6

    • SHA1

      5e0f468d9e9a9d14eef11caf54dafbe384303be4

    • SHA256

      73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848

    • SHA512

      1e3feb3861b9c664205edddd09361b2a54a9df3424c582bfdb955a8a65a26eae3adc1c825e7973b13bd9e39626f5723d3efbe27b828c8c47648d87d756f59869

    • SSDEEP

      12288:eXSX3CPuJE0/PRm3HAURSEy0OiISPSpoKT1EW0rF3:pCPuSpRSoUpoMy3

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks