General
-
Target
3da310046da9a804ca0757cbfafc0c72
-
Size
578KB
-
Sample
240101-xrwk6saeb4
-
MD5
3da310046da9a804ca0757cbfafc0c72
-
SHA1
b8e6c9346092d1bad43f4dee58b84e157f1a5e4a
-
SHA256
f66d8290b683a6de6c3a793046d8b2f908d14459d90efe21704711d9854f0306
-
SHA512
3fbbd961bc808edc023c3129ad6ef398007f8d1aa116ad088c0349f1f4b5960af089d8629057bfba5cd6e119b1fd95139cd7a15543c1df133fb8eb5bbf018798
-
SSDEEP
12288:u9y03wdYmkt9Ut9zyWS/1zZJrapeB/bL3LGIJMW0rwrsu:cwdYmktdNznieNzLhh3
Static task
static1
Behavioral task
behavioral1
Sample
3da310046da9a804ca0757cbfafc0c72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3da310046da9a804ca0757cbfafc0c72.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
fickerstealer
80.87.192.115:80
Targets
-
-
Target
3da310046da9a804ca0757cbfafc0c72
-
Size
578KB
-
MD5
3da310046da9a804ca0757cbfafc0c72
-
SHA1
b8e6c9346092d1bad43f4dee58b84e157f1a5e4a
-
SHA256
f66d8290b683a6de6c3a793046d8b2f908d14459d90efe21704711d9854f0306
-
SHA512
3fbbd961bc808edc023c3129ad6ef398007f8d1aa116ad088c0349f1f4b5960af089d8629057bfba5cd6e119b1fd95139cd7a15543c1df133fb8eb5bbf018798
-
SSDEEP
12288:u9y03wdYmkt9Ut9zyWS/1zZJrapeB/bL3LGIJMW0rwrsu:cwdYmktdNznieNzLhh3
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-