Overview

overview

10

Static

static

1

31d722331a...ae.exe

windows7-x64

10

31d722331a...ae.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.zip

  • Size

    311KB

  • Sample

    230321-qq6lescf6w

  • MD5

    e8177779dcd3f2d7a383a3418ac02c38

  • SHA1

    c1572a6cf4d75aca9217cc5840d5be6442f3afea

  • SHA256

    5d821761f42e09f79627e9327d1916ada95d49f8084b899e043a1a2fb39dd0c3

  • SHA512

    a1bfb051dde8f7ceddc78baf527bae026899f934213a826abda9e1e63796455ab339b49b827a5da47fc1d0b3145362c8319d08eb8e2fc52668062e26c0b1578a

  • SSDEEP

    6144:cYJsfTtN4o3ZI2gUu3VuO/CLWWeVudo69RwJs/7ROlCmwr0J:cB7tv3W2G3VFcWWeVs9RwJsclCmwy

Score
10/10
fickerstealerinfostealer

Malware Config

Targets

    • Target

      31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.exe

    • Size

      396KB

    • MD5

      f6f84e80684195be3d018d72f0c337e4

    • SHA1

      71edaeb2a19028b2dc74f66b27245ac8ada88117

    • SHA256

      31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae

    • SHA512

      bf4dfaa3fe983d9cecc0da761f5b49416f604774509f38a6b6a29eff4e0baef9bae5f0a601e5cfdcb15b5d1aee83822309ec2fb27ce92ab0abaaf81c3366046a

    • SSDEEP

      6144:OwLUCKwEscIr5CAM13HfyTlJRAOvS8YGuz2ewEMXqaMM+k:pgCKwEscIr1Q/utbKmewEMXd5+k

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks