General
-
Target
85dd04331f4c472e795d3cd3fbd9f6fd165b05af55aa94d429a2c90d56c46227
-
Size
280KB
-
Sample
220117-l1wrrahdc3
-
MD5
3443c50a3f82c68489c42f416079135d
-
SHA1
c55d29de699a66ffc4df52dbb917e3ac40759523
-
SHA256
85dd04331f4c472e795d3cd3fbd9f6fd165b05af55aa94d429a2c90d56c46227
-
SHA512
b03eb8159c2edf8f17c14e32e48de2673a4a1cd4fc27345af16bbb161ddd4bc1a2bc2a5a392819dc50644e0ccfc47d16372d3d2ccec36860d6569b75c6398ca8
Static task
static1
Behavioral task
behavioral1
Sample
85dd04331f4c472e795d3cd3fbd9f6fd165b05af55aa94d429a2c90d56c46227.exe
Resource
win10-en-20211208
Malware Config
Extracted
arkei
homesteadr
http://homesteadr.link/ggate.php
Targets
-
-
Target
85dd04331f4c472e795d3cd3fbd9f6fd165b05af55aa94d429a2c90d56c46227
-
Size
280KB
-
MD5
3443c50a3f82c68489c42f416079135d
-
SHA1
c55d29de699a66ffc4df52dbb917e3ac40759523
-
SHA256
85dd04331f4c472e795d3cd3fbd9f6fd165b05af55aa94d429a2c90d56c46227
-
SHA512
b03eb8159c2edf8f17c14e32e48de2673a4a1cd4fc27345af16bbb161ddd4bc1a2bc2a5a392819dc50644e0ccfc47d16372d3d2ccec36860d6569b75c6398ca8
Score10/10-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-