Extracted

• • Target

    JaffaCakes118_52241b7a6707a79755e1386a26bce09c

  • Size

    502KB

  • MD5

    52241b7a6707a79755e1386a26bce09c

  • SHA1

    bd2f102d6f10cde689835418f213db6b0713c2cd

  • SHA256

    0e01d2215e00c2a03a93b72a13476c588fbd383d4367e3d85265969e65dff388

  • SHA512

    b4f781a8344d9db9ba3ee6d54c9a2c614a3b0699c05f527b1cfd22775613c8f902eb95553b7f3a56b8a1b5b6b7715b0491159d8bcc9dc712129512551d65ea05

  • SSDEEP

    12288:KvGfd3Y8OD4pvwybEaPx7n14bwZGEX8cMMW0rw3:qW3NX1NFn1ZsEeh3

  Score

  10^/10

  fickerstealerdiscoveryinfostealer

  • Fickerstealer

    Ficker is an infostealer written in Rust and ASM.

    infostealerfickerstealer

  • Fickerstealer family

    fickerstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2