Extracted

• • Target

    0eab4511aafcde09a4050d826dde62c9

  • Size

    516KB

  • MD5

    0eab4511aafcde09a4050d826dde62c9

  • SHA1

    28f6833e0f23304ec0f7c3eae3294a2b399eb6f6

  • SHA256

    66dda18507fa772a05dbdd4a0c72f693da6ad19ce802c197b733a3400eb12840

  • SHA512

    f61a2440f3bf782f172e443a4ade0b39bebecf27fa3a98bd83dc035010c892c5d5f2a4972e231b20e6cd1ebc09d1901795d685dd1b931070f30b2775e10124ca

  • SSDEEP

    12288:W857V21+1ZagZyKGYugblv15roTMW0rwrsu:bV21EZyKlpv1sh3

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2