arkei | 35c6205f590050b844637938328dd2b2e6ef8f433521b55fc8e20fd76493deec | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows10_x64
resource
win10-en-20211208
submitted
17-01-2022 14:40

Sharing

Report Analysis Logs

General

Target

35c6205f590050b844637938328dd2b2e6ef8f433521b55fc8e20fd76493deec.exe
Size

334KB
MD5

80630a2e80f6805dd968771434cc29da
SHA1

e967a5c08d4add234952a15fb27375d6511f4d0d
SHA256

35c6205f590050b844637938328dd2b2e6ef8f433521b55fc8e20fd76493deec
SHA512

d6a15be94e3a9ec0be9ef6e42d6e3901d4e5277372036392f27a18933c7571cdedf384869d33f58c3e7be228b6965755abef0fb1ad1e596373bdd8b3b7f2735e

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://file-file-host4.com/tratata.php

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Arkei Stealer Payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2760-117-0x0000000000400000-0x00000000005DB000-memory.dmp	family_arkei

C:\Users\Admin\AppData\Local\Temp\35c6205f590050b844637938328dd2b2e6ef8f433521b55fc8e20fd76493deec.exe
"C:\Users\Admin\AppData\Local\Temp\35c6205f590050b844637938328dd2b2e6ef8f433521b55fc8e20fd76493deec.exe"
1⤵
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2760-115-0x00000000007A6000-0x00000000007B7000-memory.dmp

Filesize
68KB

Download
memory/2760-116-0x0000000000640000-0x000000000078A000-memory.dmp

Filesize
1.3MB

Download
memory/2760-117-0x0000000000400000-0x00000000005DB000-memory.dmp

Filesize
1.9MB

Download