General
-
Target
c2478eec19b79aabe6fd83e620a3267e019da62d5334fc094d38a00890fabff8
-
Size
302KB
-
Sample
220119-pd9lwahfbn
-
MD5
b57b59b5cef5eeb9edceca391c5a70f7
-
SHA1
4baeea193a00e7e0d9ed70ea4ce51ce5d0257429
-
SHA256
c2478eec19b79aabe6fd83e620a3267e019da62d5334fc094d38a00890fabff8
-
SHA512
1d58f5e95c0d27d351d32265727caa01a2b9435edbef3c8a442f6d254ec5697a1886c70abe9df5dd4f0f17db68c2013e17ec71bc0d2eefdaba2290d91ed37744
Static task
static1
Malware Config
Extracted
arkei
Default
http://file-file-host4.com/tratata.php
Targets
-
-
Target
c2478eec19b79aabe6fd83e620a3267e019da62d5334fc094d38a00890fabff8
-
Size
302KB
-
MD5
b57b59b5cef5eeb9edceca391c5a70f7
-
SHA1
4baeea193a00e7e0d9ed70ea4ce51ce5d0257429
-
SHA256
c2478eec19b79aabe6fd83e620a3267e019da62d5334fc094d38a00890fabff8
-
SHA512
1d58f5e95c0d27d351d32265727caa01a2b9435edbef3c8a442f6d254ec5697a1886c70abe9df5dd4f0f17db68c2013e17ec71bc0d2eefdaba2290d91ed37744
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-