Overview

overview

10

Static

static

10

f4c3e3416f...18.exe

windows7-x64

10

f4c3e3416f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4c3e3416fb1f06dd013e9b05ed4c059_JaffaCakes118

  • Size

    266KB

  • Sample

    240417-b2ke1aab47

  • MD5

    f4c3e3416fb1f06dd013e9b05ed4c059

  • SHA1

    2ed500f9f4d195adc475eb8f4bf84ddae04055d6

  • SHA256

    c6cd6c21110c3cedb4381797c5bfeb8e117b389ecf2a7b43be8375e6b5a7c82b

  • SHA512

    55e0c14761a028eb1565afea9a1462c8e9b395c433095384d46318401525cfd2c49d2e2181f4d69852ce15b0c07c2bf0144a03405ab45013fba1f6744ef5465b

  • SSDEEP

    6144:IKe6v0FTfwyRHsgaOSUvsyurPsq1fjXOP:I6v044aXUvQa

Score
10/10
fickerstealerinfostealer

Malware Config

Extracted

Family

fickerstealer

C2

217.12.201.112:80

Targets

    • Target

      f4c3e3416fb1f06dd013e9b05ed4c059_JaffaCakes118

    • Size

      266KB

    • MD5

      f4c3e3416fb1f06dd013e9b05ed4c059

    • SHA1

      2ed500f9f4d195adc475eb8f4bf84ddae04055d6

    • SHA256

      c6cd6c21110c3cedb4381797c5bfeb8e117b389ecf2a7b43be8375e6b5a7c82b

    • SHA512

      55e0c14761a028eb1565afea9a1462c8e9b395c433095384d46318401525cfd2c49d2e2181f4d69852ce15b0c07c2bf0144a03405ab45013fba1f6744ef5465b

    • SSDEEP

      6144:IKe6v0FTfwyRHsgaOSUvsyurPsq1fjXOP:I6v044aXUvQa

    Score
    10/10
    fickerstealerinfostealer

    • Fickerstealer

      Ficker is an infostealer written in Rust and ASM.

      infostealerfickerstealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks