Extracted

• • Target

    b01e515088bfdd6d86c73a0780062dbc4e4e78c60f3a197a496d0a4740ef5753

  • Size

    354KB

  • MD5

    d24739440dcb6305975a48d7ca99c808

  • SHA1

    c81cbb4636cd17976b571dee2c3765035a92bb41

  • SHA256

    b01e515088bfdd6d86c73a0780062dbc4e4e78c60f3a197a496d0a4740ef5753

  • SHA512

    104887a613ddf3f7aea2f85a0ee648c62cb4e586e3fb5b5287b49ec3974a8c3f164e0911564ee374cb21c1b1160f23d761a4f709ab83731c5307e8b1da31335a

  • SSDEEP

    6144:k0UXbJREPLct+JbIchhw+k2sZudU19YD/XpkTayds4XkPt/F78Sk7HL:k0GbJRIoEVIcvrk2UuK19YD/Xpkhi40I

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2