Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

8937fb7545...d1.exe

windows7-x64

6

8937fb7545...d1.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8937fb7545cb081d8d5086671e6cf9d41295e191cf1bfaf4dd70282c056c79d1.zip

  • Size

    138KB

  • Sample

    221114-lqny6age64

  • MD5

    d6e1e9082e3069a1f2dc8886bee74b29

  • SHA1

    1fecee9ea13127af28f56bcee834c920e59de010

  • SHA256

    5e2877371fccd2a96ccd42f2f24ca768431dcfc12dfc607eaadd822524a117ed

  • SHA512

    9a58a84850446b84e30aa50077d829b66e23ab13a04d2fa456b91456638cc6392a17b6e4059e84081efd758b3c9dc6e724e6bcd3151af9f44297d2ea02a6cd81

  • SSDEEP

    3072:wjYhXU+mDFf0dKtAEuw8ZYio7I9DvH/LlhaSER+Nia/ih+NBAJ4w:wjYhXU+mDFOH2Fk9b/LVih+Nymw

Score
10/10
fickerstealer

Malware Config

Extracted

Family

fickerstealer

C2

fickotstuk.space:80

Targets

    • Target

      8937fb7545cb081d8d5086671e6cf9d41295e191cf1bfaf4dd70282c056c79d1.exe

    • Size

      266KB

    • MD5

      10a3db9846445b8e1715802da3fa6d91

    • SHA1

      924de616d5d427686ef1e1e08a8881a64af2f943

    • SHA256

      8937fb7545cb081d8d5086671e6cf9d41295e191cf1bfaf4dd70282c056c79d1

    • SHA512

      0ea770c80717eb7838c939da41010dd3c479e491caf53d801377cb22bc8ebc007c52cbe07ddbe3f0f389499dcfe946c84b502982de85ab71d4bcf616e184106b

    • SSDEEP

      6144:uUP5lpW1LtuRLsEvLwkhRMSWQPd9urM6q4fjmL:Xlp+Y1zhOsPdOqL

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks