General

  • Target

    5f3061aee58a7acc32cd8f2c2777dc2514e9cb6b13a80d2c289867a56d8cb2f8

  • Size

    4.8MB

  • Sample

    230123-sfzq8sdg82

  • MD5

    dacb55c5b52f0749ddae6708496f6f7f

  • SHA1

    008b432a937354ac690f0f5c2067785dc1c8ddef

  • SHA256

    5f3061aee58a7acc32cd8f2c2777dc2514e9cb6b13a80d2c289867a56d8cb2f8

  • SHA512

    0ed7aab9bbfffb443be13c60f6b8b103cd31436b0d1cbb2b2a5ec43a1e84ff09510a012f0003ef0d46e0c4ecc80f8a31c2ac4f7919dff2bc3152b51461fae744

  • SSDEEP

    24576:/u7JMHhcvsRw7K0q/2cbyBCvNJeWKaij3yQZ9pxmQ3A9EhIAiqOXqgSWfaPSJaky:/uTv8w7G2cbOCjPmv9p+SvorASl87X

Malware Config

Extracted

Family

fickerstealer

C2

91.240.118.51:253

Targets

    • Target

      5f3061aee58a7acc32cd8f2c2777dc2514e9cb6b13a80d2c289867a56d8cb2f8

    • Size

      4.8MB

    • MD5

      dacb55c5b52f0749ddae6708496f6f7f

    • SHA1

      008b432a937354ac690f0f5c2067785dc1c8ddef

    • SHA256

      5f3061aee58a7acc32cd8f2c2777dc2514e9cb6b13a80d2c289867a56d8cb2f8

    • SHA512

      0ed7aab9bbfffb443be13c60f6b8b103cd31436b0d1cbb2b2a5ec43a1e84ff09510a012f0003ef0d46e0c4ecc80f8a31c2ac4f7919dff2bc3152b51461fae744

    • SSDEEP

      24576:/u7JMHhcvsRw7K0q/2cbyBCvNJeWKaij3yQZ9pxmQ3A9EhIAiqOXqgSWfaPSJaky:/uTv8w7G2cbOCjPmv9p+SvorASl87X

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks