General
-
Target
16ed57d6423603a522ba94bab37d92e3cf795420b929e6dcf9b4477f9ec79c04
-
Size
316KB
-
Sample
220115-nkl9gseab7
-
MD5
a3619e91fa1245858d34030236ec696b
-
SHA1
340d0ea5548b85ff429ae7102097c1b75160d236
-
SHA256
16ed57d6423603a522ba94bab37d92e3cf795420b929e6dcf9b4477f9ec79c04
-
SHA512
df550b2351ce208c159fd4f71433e463282b8ca5fd4831e8ca287d6867935b9dd3c40718953352c9e5bea143c7ecfeb39efe7179f59de830a7adb7c887617512
Static task
static1
Malware Config
Extracted
arkei
Default
http://file-file-host4.com/tratata.php
Targets
-
-
Target
16ed57d6423603a522ba94bab37d92e3cf795420b929e6dcf9b4477f9ec79c04
-
Size
316KB
-
MD5
a3619e91fa1245858d34030236ec696b
-
SHA1
340d0ea5548b85ff429ae7102097c1b75160d236
-
SHA256
16ed57d6423603a522ba94bab37d92e3cf795420b929e6dcf9b4477f9ec79c04
-
SHA512
df550b2351ce208c159fd4f71433e463282b8ca5fd4831e8ca287d6867935b9dd3c40718953352c9e5bea143c7ecfeb39efe7179f59de830a7adb7c887617512
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-