Extracted

• • Target

    4988a43a98b7d9c6aa7e71b8a8919fd6

  • Size

    511KB

  • MD5

    4988a43a98b7d9c6aa7e71b8a8919fd6

  • SHA1

    5e0f468d9e9a9d14eef11caf54dafbe384303be4

  • SHA256

    73d34ceec57d41cab2e4b22046898b531fe0b59ab16c533c7eee3a52caf29848

  • SHA512

    1e3feb3861b9c664205edddd09361b2a54a9df3424c582bfdb955a8a65a26eae3adc1c825e7973b13bd9e39626f5723d3efbe27b828c8c47648d87d756f59869

  • SSDEEP

    12288:eXSX3CPuJE0/PRm3HAURSEy0OiISPSpoKT1EW0rF3:pCPuSpRSoUpoMy3

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2