Extracted

• • Target

    c04433797667c205da21d0b783bdbbbd6ba3ca3d62f43f6e7e911ccdf09007cb

  • Size

    390KB

  • MD5

    562daf0dafe1eeed0d7b541d39136156

  • SHA1

    3b432a2b66cd8eb3837d7547ea3eb287f2b26574

  • SHA256

    c04433797667c205da21d0b783bdbbbd6ba3ca3d62f43f6e7e911ccdf09007cb

  • SHA512

    62abb8de0a46f320161e393560748ffa6ed3f89fa342dbc41e429ae67c5c1248b7facc1e26e203a61131d84eda03de2612bc1f719a0525cbba03e37abac007ba

  • SSDEEP

    6144:WlztA+MRDqoqLgblVk9hXWADQk8kVh6OV5dVvQ7ceWJdpp00xsu:Wl++MRDsKlahPDQEVpvwWJ5fxsu

  Score

  10^/10

  fickerstealerdiscoveryinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2