Overview

overview

10

Static

static

a9dea10c6d...in.exe

windows7_x64

10

a9dea10c6d...in.exe

windows10_x64

10

Resubmissions

14/10/2021, 15:13

211014-slznesafgr10

13/10/2021, 11:15

211013-ncl9hsdggp10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a9dea10c6d4d205faab1ac8db69384e9c3dc91fd5a718266957e4e164f76cd4a.bin
  • Size 311KB
  • Sample211014-slznesafgr
  • SHA256 a9dea10c6d4d205faab1ac8db69384e9c3dc91fd5a718266957e4e164f76cd4a
  • MD5 SHA1 SHA512
Score
10/10
arkeidefaultspywarestealer

Malware Config

Extracted

Family

  • arkei

Botnet

  • Default

C2

  • http://game2030.link/ggate.php

Targets

    • Target
      a9dea10c6d4d205faab1ac8db69384e9c3dc91fd5a718266957e4e164f76cd4a.bin
    • Size 311KB
    • SHA256 a9dea10c6d4d205faab1ac8db69384e9c3dc91fd5a718266957e4e164f76cd4a
    • MD5 SHA1 SHA512
    Score
    10/10
    arkeidefaultspywarestealer

    • Arkei

      Arkei is an infostealer written in C++.

      stealerarkei

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Arkei Stealer Payload

      stealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks