Analysis
-
max time kernel
133s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
10-04-2024 14:57
General
-
Target
f62434d2bfd1b9d953618d0be4ba442e3210b821575ae1b1c97ae6aa55ae394a.exe
-
Size
4.5MB
-
MD5
7912addad41057e4fd93ca599aef6b22
-
SHA1
6954b0d7afbc34086dda788bd92eb206032b9728
-
SHA256
f62434d2bfd1b9d953618d0be4ba442e3210b821575ae1b1c97ae6aa55ae394a
-
SHA512
aaa38daf119f5d7e269059ca98a3ef1bc3bfd73602b560ff0daed1cbd107fc4bcfa524591fd45de2d3c2088af086bab0c1845f3b517c614b99ad345d39914ef3
-
SSDEEP
98304:57AsIlb8NWY5mIaBJHW++kYal61OGHAwFcfn4mpaM5A1FE/cP:5Ms2KWJ2mrl60HFpP5RkP
Malware Config
Extracted
fickerstealer
86.107.197.85:80
Signatures
-
Fickerstealer
Ficker is an infostealer written in Rust and ASM.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f62434d2bfd1b9d953618d0be4ba442e3210b821575ae1b1c97ae6aa55ae394a.exe"C:\Users\Admin\AppData\Local\Temp\f62434d2bfd1b9d953618d0be4ba442e3210b821575ae1b1c97ae6aa55ae394a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14B
MD51207bc197a1ebd72a77f1a771cad9e52
SHA18ed121ff66d407150d7390b9276fe690dd213b27
SHA256260658b9cb063d6ce96f681b18704e02fae7bf8fc995fc249ab0be1400983476
SHA512d037cfa3b6e6ced9652b2c781bb54cf48dbaa0aaff05039ae4fd0122749eda472807d4198981aa6ceffeba6d2b23d7ad08d7d96983dbd8539cf6b07e46e157f4
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
7.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
7.4MB