Extracted

• • Target

    2dc444a79c5ca26e6bd366eb5dc16379

  • Size

    590KB

  • MD5

    2dc444a79c5ca26e6bd366eb5dc16379

  • SHA1

    2e18f9916153f7c0139cba88d9609c6902b06deb

  • SHA256

    8d7f0042459c12c3406a7df00345abbb94e6d94430fcf86949ed378e4412c6bb

  • SHA512

    4f68f9a769b3faef8aed67f781c4caee6f0a021381ab16444483c3c42dbb7d1e79e91c0758f46d32afa0624499b0cadddaf1f82f02a3ed6529cbf562f551122e

  • SSDEEP

    6144:cIqDutDrHDSKzneQDkZfwMEhGpX5Ig5BWjoy8rEEUr8QrMW0rLAb56dpLN4XQKJ3:0qRrHDSKzneaYjrBW0y83xgMW0rwrsu

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2