arkei | 81bc6e0cf586a808ef3ee9c5ace20622f414853a8606007357104c39f5fa5693 | Triage

Sharing

General

Target

81bc6e0cf586a808ef3ee9c5ace20622f414853a8606007357104c39f5fa5693
Size

316KB
Sample

220115-ww48faehe3
MD5

bfa2ac832261df46640df025737b8c4a
SHA1

d7922ef0cef7cc4f7ce9df47ba4de6c9822f14a9
SHA256

81bc6e0cf586a808ef3ee9c5ace20622f414853a8606007357104c39f5fa5693
SHA512

097cd3a632d90ecc95531c467b5460aa48d397887c17838ad17a53b7a1162cf3b78c45e978a030d637aef98fcf50444baf4fbef35c8501f8b6e5885b1f50bea9

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://209.209.115.111/SYiQ6N1zUJ.php

Targets

- Target
  
  81bc6e0cf586a808ef3ee9c5ace20622f414853a8606007357104c39f5fa5693
- Size
  
  316KB
- MD5
  
  bfa2ac832261df46640df025737b8c4a
- SHA1
  
  d7922ef0cef7cc4f7ce9df47ba4de6c9822f14a9
- SHA256
  
  81bc6e0cf586a808ef3ee9c5ace20622f414853a8606007357104c39f5fa5693
- SHA512
  
  097cd3a632d90ecc95531c467b5460aa48d397887c17838ad17a53b7a1162cf3b78c45e978a030d637aef98fcf50444baf4fbef35c8501f8b6e5885b1f50bea9
Score

10^/10

arkei default stealer
- Arkei
  Arkei is an infostealer written in C++.
  stealer arkei
- Arkei Stealer Payload
  stealer
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

arkeidefaultstealer