arkei | 405da412edc6cf6ff78a22496e5ca402754c5dd048b3ce6401d3ae9243d98d30 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows10_x64
resource
win10-en-20211208
submitted
17-01-2022 10:50

Sharing

Report Analysis Logs

General

Target

405da412edc6cf6ff78a22496e5ca402754c5dd048b3ce6401d3ae9243d98d30.exe
Size

336KB
MD5

bc2ae87666e5d9916ffe60147cb703c7
SHA1

61b622f43f8359f5d80d1ad06be07306a71ee82a
SHA256

405da412edc6cf6ff78a22496e5ca402754c5dd048b3ce6401d3ae9243d98d30
SHA512

4b46ffea8ed699de5b2a1347cf3d45d63a1374cf970000b6ae79780268c76a97e0e596fc4955693582c5231c652eb36a7cb77ca26065d546d49771b51c2f0c9e

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://file-file-host4.com/tratata.php

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Arkei Stealer Payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2632-117-0x0000000000400000-0x00000000005DC000-memory.dmp	family_arkei

C:\Users\Admin\AppData\Local\Temp\405da412edc6cf6ff78a22496e5ca402754c5dd048b3ce6401d3ae9243d98d30.exe
"C:\Users\Admin\AppData\Local\Temp\405da412edc6cf6ff78a22496e5ca402754c5dd048b3ce6401d3ae9243d98d30.exe"
1⤵
PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2632-115-0x0000000000926000-0x0000000000937000-memory.dmp

Filesize
68KB

Download
memory/2632-116-0x00000000005E0000-0x000000000072A000-memory.dmp

Filesize
1.3MB

Download
memory/2632-117-0x0000000000400000-0x00000000005DC000-memory.dmp

Filesize
1.9MB

Download