General

  • Target

    stealer_ru.exe

  • Size

    8.6MB

  • Sample

    230203-ltj5dahd31

  • MD5

    d95ea551314bf9ed1637c112f0d10646

  • SHA1

    8dcb9b424550a39cd4407bae8cb217da9d3b9561

  • SHA256

    67ae17fcc4bf84607743e50e01346f4275f1e690218512dcc16567e6445f3068

  • SHA512

    1983485a41b7eda705a6870b16189f32afa076cff13af1a5b317cd41212025b39666f2ce3e7fa2ccbab038dac4b776b402f21afa40eea4a4b233af0432f8a7e5

  • SSDEEP

    49152:wuTv8w79M1wXZKJsbWNYIkssb7Iorsrpk47Yb:wuTv8XOTKhors1p7k

Malware Config

Targets

    • Target

      stealer_ru.exe

    • Size

      8.6MB

    • MD5

      d95ea551314bf9ed1637c112f0d10646

    • SHA1

      8dcb9b424550a39cd4407bae8cb217da9d3b9561

    • SHA256

      67ae17fcc4bf84607743e50e01346f4275f1e690218512dcc16567e6445f3068

    • SHA512

      1983485a41b7eda705a6870b16189f32afa076cff13af1a5b317cd41212025b39666f2ce3e7fa2ccbab038dac4b776b402f21afa40eea4a4b233af0432f8a7e5

    • SSDEEP

      49152:wuTv8w79M1wXZKJsbWNYIkssb7Iorsrpk47Yb:wuTv8XOTKhors1p7k

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks