Extracted

• • Target

    cc8e8bed26e01bd70934e3694d47539f_JaffaCakes118

  • Size

    368KB

  • MD5

    cc8e8bed26e01bd70934e3694d47539f

  • SHA1

    a82c59683d4763347951eeaf71f94568ea3678d9

  • SHA256

    55c76c4160faaf104652eb6da27dda571da4c92a1d4be2e17885c7d0ff3bcbc8

  • SHA512

    24cbe8822c99ecbab6b102be7045e16b5236fe4d1ae63a74e391328633ad4fc7e3d21eb3a6f01222f95643caf5c2ad2e18bf185dd1911ecf4d481129d4b657a5

  • SSDEEP

    6144:Ke7+66+IWTs/ZrTcNgQitIBhAAK6zIwxCAVcE7Oew073WmJrI1y7Nc/FvwMP:KM+6trAVcrituY/wxrKh0PJZcNv5P

  Score

  10^/10

  fickerstealerdiscoveryinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2