Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2966d3cdff20bd36ab02fc6d41d838521db272c23b802f1f797adedac3466202

  • Size

    332KB

  • Sample

    220121-nskqmaggg4

  • MD5

    eeeb001f23554aae6e1f8eea0a5dcb42

  • SHA1

    b7743cf0065b86cd946cb43ffdd012c2f40defc0

  • SHA256

    2966d3cdff20bd36ab02fc6d41d838521db272c23b802f1f797adedac3466202

  • SHA512

    5e22d01b72c874d8f4cc1eeb66107e78c43f719cd73124c4aa53d1120b4c7d2a1bebca7e31b07b1da36fe5f4d2c9ff1fc369c4cbb57485283855c3ac87030784

Score
10/10
arkeidefaultdiscoveryspywarestealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://homesteadr.link/ggate.php

Targets

    • Target

      2966d3cdff20bd36ab02fc6d41d838521db272c23b802f1f797adedac3466202

    • Size

      332KB

    • MD5

      eeeb001f23554aae6e1f8eea0a5dcb42

    • SHA1

      b7743cf0065b86cd946cb43ffdd012c2f40defc0

    • SHA256

      2966d3cdff20bd36ab02fc6d41d838521db272c23b802f1f797adedac3466202

    • SHA512

      5e22d01b72c874d8f4cc1eeb66107e78c43f719cd73124c4aa53d1120b4c7d2a1bebca7e31b07b1da36fe5f4d2c9ff1fc369c4cbb57485283855c3ac87030784

    Score
    10/10
    arkeidefaultdiscoveryspywarestealer

    • Arkei

      Arkei is an infostealer written in C++.

      stealerarkei

    • Arkei Stealer Payload

      stealer

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks