Extracted

• • Target

    9c814ebc0078d5192d783da27b4efdbd1e435269f97959de5b14070db34abcb9

  • Size

    364KB

  • MD5

    e8a562932bb4e8200d0ae392c46ae657

  • SHA1

    44dfe9a2865b073bca5a45ae8d0af6712cb75802

  • SHA256

    9c814ebc0078d5192d783da27b4efdbd1e435269f97959de5b14070db34abcb9

  • SHA512

    d8b0b31ef1593e6ae64f7238969fc2c73260ed6c514589855ec5a91b4bbf7c26dcd150bb31cf1df19e6aa0fcd61922f41cf960b29e4b010fbd6058e2d3d891d1

  • SSDEEP

    6144:sDcU5WFbh62+YG6Js+WKRrhMX55UglzGicTTf/jkEd:sDcU5WFbhEYG623KR1UqI95Ed

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2