arkei | d3a76c572910f00f19d607ace508b3ce6f392c675bd8e4fc42709a3ec1af0650 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-2004_x64

Sharing

General

Target

d3a76c572910f00f19d607ace508b3ce6f392c675bd8e4fc42709a3ec1af0650
Size

280KB
Sample

220117-cl6tqsgec9
MD5

0b1c4986418b8d03ead779b51a9689ea
SHA1

2ff73f6a5f3f9aab92eabf24e48fa793d20f251a
SHA256

d3a76c572910f00f19d607ace508b3ce6f392c675bd8e4fc42709a3ec1af0650
SHA512

8b6446a03f880496b6e7aba7fae9a6cc2802760e68e604c4116c0f8ee72bc6c7ab57dcd1f9ac38e37584bdfb38e96fadd562fc6cb6f34187685849634b38ef59

Score

10^/10

arkei default stealer

Static task

static1

Behavioral task

behavioral1

Sample

d3a76c572910f00f19d607ace508b3ce6f392c675bd8e4fc42709a3ec1af0650.exe

Resource

win10v2004-en-20220112

arkei default stealer

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://file-file-host4.com/tratata.php

Targets

- Target
  
  d3a76c572910f00f19d607ace508b3ce6f392c675bd8e4fc42709a3ec1af0650
- Size
  
  280KB
- MD5
  
  0b1c4986418b8d03ead779b51a9689ea
- SHA1
  
  2ff73f6a5f3f9aab92eabf24e48fa793d20f251a
- SHA256
  
  d3a76c572910f00f19d607ace508b3ce6f392c675bd8e4fc42709a3ec1af0650
- SHA512
  
  8b6446a03f880496b6e7aba7fae9a6cc2802760e68e604c4116c0f8ee72bc6c7ab57dcd1f9ac38e37584bdfb38e96fadd562fc6cb6f34187685849634b38ef59
Score

10^/10

arkei default stealer
- Arkei
  Arkei is an infostealer written in C++.
  stealer arkei
- Suspicious use of NtCreateProcessExOtherParentProcess
- Arkei Stealer Payload
  stealer
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

arkeidefaultstealer

© 2018-2024

Terms | Privacy