Analysis
-
max time kernel
40s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
03-02-2023 09:49
General
-
Target
stealer_ru.exe
-
Size
8.6MB
-
MD5
d95ea551314bf9ed1637c112f0d10646
-
SHA1
8dcb9b424550a39cd4407bae8cb217da9d3b9561
-
SHA256
67ae17fcc4bf84607743e50e01346f4275f1e690218512dcc16567e6445f3068
-
SHA512
1983485a41b7eda705a6870b16189f32afa076cff13af1a5b317cd41212025b39666f2ce3e7fa2ccbab038dac4b776b402f21afa40eea4a4b233af0432f8a7e5
-
SSDEEP
49152:wuTv8w79M1wXZKJsbWNYIkssb7Iorsrpk47Yb:wuTv8XOTKhors1p7k
Score
10/10
Malware Config
Signatures
-
Fickerstealer
Ficker is an infostealer written in Rust and ASM.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
Processes
-
C:\Users\Admin\AppData\Local\Temp\stealer_ru.exe"C:\Users\Admin\AppData\Local\Temp\stealer_ru.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4.2MB
-
Filesize
5.3MB
-
Filesize
5.3MB