Extracted

• • Target

    96e013855d1c673cd9c3a756c455881122d9ec5930131956b1a807189a9a991d.exe

  • Size

    282KB

  • MD5

    72dcda0a0601b6e7df5b2d4133d8224f

  • SHA1

    4604ae50310f18648bfdce614f6332088cddff63

  • SHA256

    96e013855d1c673cd9c3a756c455881122d9ec5930131956b1a807189a9a991d

  • SHA512

    d7e08462a7e6e27d707becc83825ec3ec9275cc36b60e85c4980d8ea5002d3a7973cb89ae993b657e38be502db206a0b27fa0cfd784505c0fba0f2b1edfc92a4

  • SSDEEP

    6144:K8it3a+Prec1DJGDBXgN61cZlCsIH37fv1u5Jj6mV6:KJ3ofFXgcWWsIH37fya

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2