Analysis
-
max time kernel
39s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 00:43
General
-
Target
1dd2d3890fb72e583cee5a0e18392704.exe
-
Size
2.3MB
-
MD5
1dd2d3890fb72e583cee5a0e18392704
-
SHA1
9ece04bbd9fc829c551c612c3f6150be8e447991
-
SHA256
2657021520b107b21400d210ddfa5178aa6183a22cd5b56d8754e53e381be891
-
SHA512
f76dfb1a75b55aab315498973554fbcb26634cba2a509dc34b2d555c9ab297d0391a4c40c7cded88750cce853c9ff142264561450841a5f45645a1e5116b550d
-
SSDEEP
49152:IYnswzLWlr4W9o5YfMbMcRc/s+kobXnz/q/xnd/c/fnr/a5RZH7HAnnnnnLFz8++:bsblrFz0DAekNy/
Score
10/10
Malware Config
Extracted
Family
fickerstealer
C2
91.211.248.143:80
Signatures
-
Fickerstealer
Ficker is an infostealer written in Rust and ASM.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1dd2d3890fb72e583cee5a0e18392704.exe"C:\Users\Admin\AppData\Local\Temp\1dd2d3890fb72e583cee5a0e18392704.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
-
Filesize
2.3MB
-
Filesize
2.3MB