General
-
Target
58d1e777704216e668537c6db64d0178d44071736ed966eb3fc88bc05e6840c3.zip
-
Size
201KB
-
Sample
230321-qq6w7acf6x
-
MD5
53c86f7c343abdcd0a4908386941a88e
-
SHA1
c24f2d836d5f59bd8e490d1e189625ff6f86d8e9
-
SHA256
f5f542f8ee99e8d6fd8273cbd8142f5a5d6a1076b25cd6157b12274b81f333da
-
SHA512
8d0e17c62381277afb15d2309a64e9c68e86bc6f0ecc970c35c3be8d02bb046f1e0804fa57adda9b759d6ead3418aac80afaf6798835ef28d8e2f3aab47240d0
-
SSDEEP
3072:YmgovmThPArBlUyHiGfCILAP5a5z4Bf0XlJci8rYI4EetmPX9rCKcmuw1HpDH5/W:dg0LHBCezz5X8oFmv9Rb1HdZ1EDwJ4
Behavioral task
behavioral1
Sample
58d1e777704216e668537c6db64d0178d44071736ed966eb3fc88bc05e6840c3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
58d1e777704216e668537c6db64d0178d44071736ed966eb3fc88bc05e6840c3.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
fickerstealer
blogsme.link:8080
Targets
-
-
Target
58d1e777704216e668537c6db64d0178d44071736ed966eb3fc88bc05e6840c3.exe
-
Size
391KB
-
MD5
42281d49da52812c4cd33228af087eaf
-
SHA1
7779d21fc9d1ea46dc643dfd45fa32ba4f54e6e2
-
SHA256
58d1e777704216e668537c6db64d0178d44071736ed966eb3fc88bc05e6840c3
-
SHA512
5bdc8c9f4056a8ba7fd6a03f438e871cec4ded79f1d8886e40b44904626de204341b50b76024309e6d4354fa62d20b2d3e9c0df398013bf20c2808f73c3b65e5
-
SSDEEP
6144:cW3mkqlxrNBKiU6893YBwq3xj4/XjT7d6srMQW+bXvd0GsuFC1OlbTVdWnKfX:Lmk8TZUloBPsPj4KN/d0ouN
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-