Extracted

• • Target

    6b86f83e3771fc5980e3a3ded1e1ecd25baff9f8cbd4f413300210790f99c42c

  • Size

    366KB

  • MD5

    34862c07cd78d7a666d050b47dd2947e

  • SHA1

    7cdbf29b0f30c5027a0a9a36d31dbaf59ff87a35

  • SHA256

    6b86f83e3771fc5980e3a3ded1e1ecd25baff9f8cbd4f413300210790f99c42c

  • SHA512

    baccd1c82c046a5c5449be13b965e22922705edfe14355868fa4436ccf5b8d9e20a015cefb59d412c48ec9b9dcf4fc11c327ad1fa2a73beb210a4bfcc8bece3b

  • SSDEEP

    6144:CIpMzUW/BsYB1Z7ophFTFYh4mYvshWh1OpZbjukXjG9T2KrjPRZfKNyhTO4sbwfv:CfgWJtj9ophrM49O44pZbju0jGFzjPRf

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2