Overview

overview

10

Static

static

1

Info.nfo

windows10-2004-x64

1

Setup.exe

windows10-2004-x64

10

THEPIRATEBAY.ORG.url

windows10-2004-x64

4

data.dat

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.ThePirateBay.ORG.zip

  • Size

    2.2MB

  • Sample

    230303-1k2emabe84

  • MD5

    c412d9d4336b5fe882825f1742126407

  • SHA1

    55119ef75aaed728605131518d49fb0a882d0f6d

  • SHA256

    c4ec12470e6f21093059b9b39eda5df8dff896ac4c8944615c928dd4370a2a9d

  • SHA512

    297f8bbf11f26827528c4986d13df0ea469965c3418daf06267823fad8e71ba6de6e9f94e29022f974f58d896685beca200f1d24e75deb753ed2d275603c29ad

  • SSDEEP

    49152:x85cXyuSH0MjKV60uIOyDFTh7oTCrTnkx9gbF:xM3uSfKV6/Ipjo4Tkx0

Score
10/10
fickerstealerinfostealerspywarestealer

Malware Config

Targets

    • Target

      Info.nfo

    • Size

      683B

    • MD5

      6bbc3c10a97e110023077fcbaf26e6e6

    • SHA1

      7999a96fab5eed4f892e750cdd607c1ee07cce05

    • SHA256

      c7a19489aaed6b69554eaaccdb7fe339dcf708a6fae2b8694f515d8f16999063

    • SHA512

      b3b74f090ba83cedb5c6251fbb8fc3ff3ad2267807ebddf6584d2ca9597301ded6fa53792e8c9b8a0da5f7afdccc112c342476ec4f1cf0d6d5d77d912191e8a2

    Score
    1/10
    behavioral1

    • Target

      Setup.exe

    • Size

      743.9MB

    • MD5

      ae56df057a76438211d5f67b2bebb60f

    • SHA1

      d534eb46073c9f427e86e8d246d972ae9785ff05

    • SHA256

      9bfa463e61d2d739ecfcdc9400fc9f9dfaf49aaca42a0b4d2ac185131e0629ef

    • SHA512

      3d3bc206e6a4aa3c55faddc7f7e98c5a072fe176697d459280ec9222695cff0d674e627a4f371d03642e0fd908212335e5b9db25daa78d41640cec484b295b09

    • SSDEEP

      49152:EWMn2d/BRoXdCtEnSVw0cwonfMOY7REYr4nN:EWQcefSROYNJr4

    Score
    10/10
    fickerstealerinfostealerspywarestealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral2

    • Target

      THEPIRATEBAY.ORG.url

    • Size

      115B

    • MD5

      f0a05245942df80720c52d58064731ee

    • SHA1

      93c6920833b261bfa3c734244033be09b0d60ecf

    • SHA256

      650cae89065a9b00e4a7a1f3dfe4fb03a33f5bf96453a71db1c05b30f5469f66

    • SHA512

      97b27df459ac854b5e99f1ad55a05a56877ba2ec8548439febdf7e249ceced42d9d6da32683cb1d5da8e13903356446ba85d945ae04c2798a5da2c41480a5aac

    Score
    4/10
    behavioral3

    • Target

      data.dat

    • Size

      30.0MB

    • MD5

      5b4fe8caa826721d851e10bc7e9b73d0

    • SHA1

      9fd6f1829d6757761d2f875ae6fccc9892a61188

    • SHA256

      a829d08eac5339bd6941a598d09e5402a677ed5d3164ed8a9ffa277b8f6fdb0d

    • SHA512

      64ffde1ac11470ff51249e518fd6983625f105f4dbe1e24ba3ff17f2338a703f458a7bf2b7e7457a76632f9a28c6378c565d83d130572837639b33e735a9eeaf

    • SSDEEP

      6144:7TTSTiTTTSTTTSTiTTTSTTTSTiTTTSTTTSTiTTTSTTTSTiTTTSTTTSTiTTTSTTTq:C

    Score
    3/10
    behavioral4

MITRE ATT&CK Enterprise v6

Tasks