General
-
Target
47565b8c4631855a64472c2b2da0833621248ec4b5c9afc4483284c6dca15418
-
Size
263KB
-
Sample
220120-1l7m2abghp
-
MD5
d09daeb1b59fa61b56fcb0eee5d912d8
-
SHA1
308228cd3a2711d47273e8b75d8d092d259c393b
-
SHA256
47565b8c4631855a64472c2b2da0833621248ec4b5c9afc4483284c6dca15418
-
SHA512
1953c05b01dfb2a727ab659d1802b7a4829eca25ec99db1d9ba1dcb72277d8b0abb72b4604df5231ac87704cc997cdf11ffceffcc244dfc384d4c0eeaed4a670
Static task
static1
Malware Config
Extracted
arkei
Default
http://file-file-host4.com/tratata.php
Targets
-
-
Target
47565b8c4631855a64472c2b2da0833621248ec4b5c9afc4483284c6dca15418
-
Size
263KB
-
MD5
d09daeb1b59fa61b56fcb0eee5d912d8
-
SHA1
308228cd3a2711d47273e8b75d8d092d259c393b
-
SHA256
47565b8c4631855a64472c2b2da0833621248ec4b5c9afc4483284c6dca15418
-
SHA512
1953c05b01dfb2a727ab659d1802b7a4829eca25ec99db1d9ba1dcb72277d8b0abb72b4604df5231ac87704cc997cdf11ffceffcc244dfc384d4c0eeaed4a670
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-