Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    10/01/2022, 11:02

General

  • Target
    c4e7221f747d0bc8be0163bde58d138e68191346d09dceaa56425e546e2e1015.exe
  • Size 326KB
  • Sample220110-m49y8aeebq
  • SHA256 c4e7221f747d0bc8be0163bde58d138e68191346d09dceaa56425e546e2e1015
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • arkei

Botnet
  • Default

C2
  • http://file-file-host4.com/tratata.php

Signatures

  • Arkei

    Arkei is an infostealer written in C++.

  • Arkei Stealer Payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c4e7221f747d0bc8be0163bde58d138e68191346d09dceaa56425e546e2e1015.exe
    "C:\Users\Admin\AppData\Local\Temp\c4e7221f747d0bc8be0163bde58d138e68191346d09dceaa56425e546e2e1015.exe"
    1⤵
      PID:3420

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3420-116-0x0000000000600000-0x000000000061C000-memory.dmp

          memory/3420-115-0x00000000005E0000-0x00000000005F1000-memory.dmp

          memory/3420-117-0x0000000000400000-0x000000000045A000-memory.dmp