Extracted

• • Target

    3da310046da9a804ca0757cbfafc0c72.exe

  • Size

    578KB

  • MD5

    3da310046da9a804ca0757cbfafc0c72

  • SHA1

    b8e6c9346092d1bad43f4dee58b84e157f1a5e4a

  • SHA256

    f66d8290b683a6de6c3a793046d8b2f908d14459d90efe21704711d9854f0306

  • SHA512

    3fbbd961bc808edc023c3129ad6ef398007f8d1aa116ad088c0349f1f4b5960af089d8629057bfba5cd6e119b1fd95139cd7a15543c1df133fb8eb5bbf018798

  • SSDEEP

    12288:u9y03wdYmkt9Ut9zyWS/1zZJrapeB/bL3LGIJMW0rwrsu:cwdYmktdNznieNzLhh3

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2