Overview

overview

10

Static

static

3fd9ff9577...83.exe

windows7-x64

10

3fd9ff9577...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fd9ff9577965ca491e54eee026c061e4f2f54f275b8592095b20a71c0302c83.zip

  • Size

    4.8MB

  • Sample

    221114-lqpwfsge68

  • MD5

    7937451badab414b99a91375955a746d

  • SHA1

    9922b5f682cd551dbaa024ba3f9befb65779379f

  • SHA256

    69146cb1a512e6a4063042d7ec5e9e1857f33fc6ac02a7bcefcd289fc79ffe93

  • SHA512

    a6a3b90eafb0497ac08bf5aaf8dce19831d8a913ac5364caffa4c82363ff251303a1bc3cc0a7cdeb5b5e2b0ed767b722c14b3b25d14d0cbc96f24da4cff53ecd

  • SSDEEP

    98304:GQRKh//SttTPfgHcRUXUBxduO0mMXvqMp24ZyIUsuO:GQS/UtT3XUXUBxwFhfqalZyiuO

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

65.108.27.133:80

Targets

    • Target

      3fd9ff9577965ca491e54eee026c061e4f2f54f275b8592095b20a71c0302c83.exe

    • Size

      5.3MB

    • MD5

      ea7ea286b1c34c7784b510831b3683fb

    • SHA1

      f3fe585bc5a2650a6fb4df6833d2aeb80d3e5045

    • SHA256

      3fd9ff9577965ca491e54eee026c061e4f2f54f275b8592095b20a71c0302c83

    • SHA512

      c96c7162fd6ada50de7de75b336ff3c9eba181a8e4d955b06e86c6fb8a80d03f4ada53fab5e423c6d308fcfc41bf445e7b2d79bf13be2eed2c352e4851acdec7

    • SSDEEP

      98304:Ou7sHDUFyq6ltzmzwqGOceVIODtHdkIt9KmmMAi6zDySg9lU4Pv0w:V+D4yq6ltSwqGZQ9rdrIDySgY4P8w

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks