Description
Arkei is an infostealer written in C++.
1bc50846578de2c0d2a18bee4b1f828d293d652664458c862d363f3c562c2eda
332KB
220117-tg6fvabae3
397dd91bf6524e005ffa060dc1503f65
35bba2a4b482f659e1bf0aa6423d609c554c5e12
1bc50846578de2c0d2a18bee4b1f828d293d652664458c862d363f3c562c2eda
4cbc6aafd4b5a8d720f147ef752d136def4d249e385841de7c595b7cf662e611155aca2aaa947d8cdd2f980908d700b371f564e124f08d2b376bf4dd28308d11
Family | smokeloader |
Version | 2020 |
C2 |
http://host-data-coin-11.com/ http://file-coin-host-12.com/ http://srtuiyhuali.at/ http://fufuiloirtu.com/ http://amogohuigotuli.at/ http://novohudosovu.com/ http://brutuilionust.com/ http://bubushkalioua.com/ http://dumuilistrati.at/ http://verboliatsiaeeees.com/ |
rc4.i32 |
|
rc4.i32 |
|
rc4.i32 |
|
rc4.i32 |
|
Family | tofsee |
C2 |
patmushta.info parubey.info |
Family | raccoon |
Version | 1.8.5 |
Botnet | 628dbe616eb46c5e66398ea6a12fa931e1f38eaf |
Attributes |
url4cnc http://185.163.204.22/capibar http://178.62.113.205/capibar https://t.me/capibar |
rc4.plain |
|
rc4.plain |
|
Family | arkei |
Botnet | Default |
C2 |
http://file-file-host4.com/tratata.php |
1bc50846578de2c0d2a18bee4b1f828d293d652664458c862d363f3c562c2eda
397dd91bf6524e005ffa060dc1503f65
332KB
35bba2a4b482f659e1bf0aa6423d609c554c5e12
1bc50846578de2c0d2a18bee4b1f828d293d652664458c862d363f3c562c2eda
4cbc6aafd4b5a8d720f147ef752d136def4d249e385841de7c595b7cf662e611155aca2aaa947d8cdd2f980908d700b371f564e124f08d2b376bf4dd28308d11
Arkei is an infostealer written in C++.
Simple but powerful infostealer which was very active in 2019.
Modular backdoor trojan in use since 2014.
Backdoor/botnet which carries out malicious activities based on commands from a C2 server.
XMRig is a high performance, open source, cross platform CPU/GPU miner.
Looks up country code configured in the registry, likely geofence.
Infostealers often target stored browser data, which can include saved credentials etc.
Detects Themida, an advanced Windows software protection system.
Looks up Uninstall key entries in the registry to enumerate software on the system.