Extracted

• • Target

    7a2d70556ffabb1735009b8dd26dff84

  • Size

    335KB

  • MD5

    7a2d70556ffabb1735009b8dd26dff84

  • SHA1

    5cb5e9a85d27c5d0eb40d1b7b230aeef0d167df5

  • SHA256

    7adc964978fc6d07051540dce92572970ce1564f239bbefcdf823ae6b00d8624

  • SHA512

    97df75afb48dd920f523d0415ebd2c7c9f1d91c67c767ca31f66fa0ea99cf76525b605264ef6ede30a5306df80b01fe54bbaab71273d788e0e345678635dc5c0

  Score

  10^/10

  arkeihomesteadrdiscoveryspywarestealer

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei

  • Arkei Stealer Payload

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2