eufive_20210830-223756

General
Target

eufive_20210830-223756

Size

264KB

Sample

210830-jf66awadzx

Score
10 /10
MD5

134fac2ca9c3723cd6107a69f7f06c9e

SHA1

dd81965431606b8e940bb4a5f8f83a9b060d7f10

SHA256

111dd17966a5f7058eb1cfc468c1d062602437a69694aa05eff97d121d611408

SHA512

3d170c5cfaae1ad3f0288afae0a45ce43b852196c74b779618ccaa6dd53009ca3342aa867c6e44164c34b295698b9bf096b640cceeb183e82b1e6cb4f379ada3

Malware Config
Targets
Target

eufive_20210830-223756

MD5

134fac2ca9c3723cd6107a69f7f06c9e

Filesize

264KB

Score
10 /10
SHA1

dd81965431606b8e940bb4a5f8f83a9b060d7f10

SHA256

111dd17966a5f7058eb1cfc468c1d062602437a69694aa05eff97d121d611408

SHA512

3d170c5cfaae1ad3f0288afae0a45ce43b852196c74b779618ccaa6dd53009ca3342aa867c6e44164c34b295698b9bf096b640cceeb183e82b1e6cb4f379ada3

Tags

Signatures

  • Arkei

    Description

    Arkei is an infostealer written in C++.

    Tags

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Arkei Stealer Payload

    Tags

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local System Credentials in Files
  • Accesses cryptocurrency files/wallets, possible credential harvesting

    Tags

    TTPs

    Data from Local System Credentials in Files
  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Execution
        Exfiltration
          Impact
            Initial Access
              Lateral Movement
                Persistence
                  Privilege Escalation
                    Tasks

                    static1

                    behavioral1

                    10/10

                    behavioral2

                    10/10