Extracted

• • Target

    672b7003e196506c38bf68b4275fbff5

  • Size

    510KB

  • MD5

    672b7003e196506c38bf68b4275fbff5

  • SHA1

    23668cfa1bd4b0b593d050a4c34750c61406393c

  • SHA256

    14b904b8f2cd2d5532093911a20daed81a10ea90b3823386264be75315c5ff3b

  • SHA512

    a1ccf18769f0cc90322d287f0867a71e8958bd916a414aa1fa1dc011017cf3ddaf978e3c96fd129d5550b404fc9fbdb2da5bc95282ef306448981586e4432ac5

  • SSDEEP

    12288:wA7Q9+HPHHkzXmCwz8mxZ+XgBOtPH1EW0rF3:bnHPnJz1kgMtty3

  Score

  10^/10

  fickerstealerinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2