General
- Target 88dc235aa4a6fb4358824eb9ff54761f.exe
- Size 342KB
- Sample211129-x1hexafff2
- SHA256 488ba7404082cc16e852e7a284bb962f67563c82ab7fc43dd7bdba6b8a5b4de2
- MD5 88dc235aa4a6fb4358824eb9ff54761f
- SHA1 b0af38056ca15bf2cfa961a6d835a14857dbe402
- SHA512 4338ac7deb4e1e424da37db8f5d2af3913884f8114b06243a8ad62e40103267750524810589fd7a5f9ba270faae41077b776ee34616bae853c6f964b89e05e8d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
88dc235aa4a6fb4358824eb9ff54761f.exe
Resource
win7-en-20211104
0 signatures
0 seconds
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
C2
-
http://file-file-host4.com/tratata.php
Targets
-
- Target 88dc235aa4a6fb4358824eb9ff54761f.exe
- Size 342KB
- SHA256 488ba7404082cc16e852e7a284bb962f67563c82ab7fc43dd7bdba6b8a5b4de2
- MD5 88dc235aa4a6fb4358824eb9ff54761f
- SHA1 b0af38056ca15bf2cfa961a6d835a14857dbe402
- SHA512 4338ac7deb4e1e424da37db8f5d2af3913884f8114b06243a8ad62e40103267750524810589fd7a5f9ba270faae41077b776ee34616bae853c6f964b89e05e8d
- MD5 SHA1 SHA512
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.