Overview

overview

10

Static

static

10

6hjusfd8.exe

windows7-x64

10

6hjusfd8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6hjusfd8.exe

  • Size

    267KB

  • Sample

    240327-cgkeyaaa25

  • MD5

    77be0dd6570301acac3634801676b5d7

  • SHA1

    7394632d8cfc00c35570d219e49de63076294b6b

  • SHA256

    94e60de577c84625da69f785ffe7e24c889bfa6923dc7b017c21e8a313e4e8e1

  • SHA512

    4ca6db741c01f32f168c0d496494f8f46402885922074c010cd3085f8271bd374f5a3b07ec0717eb6fa9fe11f9c74de6d22a75690359381d08ecb6853150d07c

  • SSDEEP

    6144:VMWdTMYHqhElscw4liVM1LDtG8esyh3hNn+:TdTJqWrEVcDYxN+

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

sweyblidian.com:80

Targets

    • Target

      6hjusfd8.exe

    • Size

      267KB

    • MD5

      77be0dd6570301acac3634801676b5d7

    • SHA1

      7394632d8cfc00c35570d219e49de63076294b6b

    • SHA256

      94e60de577c84625da69f785ffe7e24c889bfa6923dc7b017c21e8a313e4e8e1

    • SHA512

      4ca6db741c01f32f168c0d496494f8f46402885922074c010cd3085f8271bd374f5a3b07ec0717eb6fa9fe11f9c74de6d22a75690359381d08ecb6853150d07c

    • SSDEEP

      6144:VMWdTMYHqhElscw4liVM1LDtG8esyh3hNn+:TdTJqWrEVcDYxN+

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks