arkei | 6a65c92c21ee1d2049857d7e311f7c00520d9bdb2cd9c72984dfccc0869b5132 | Triage

Analysis

max time kernel
136s
max time network
150s
platform
windows10_x64
resource
win10-en-20211208
submitted
22-01-2022 13:13

Sharing

Report Analysis Logs

General

Target

6a65c92c21ee1d2049857d7e311f7c00520d9bdb2cd9c72984dfccc0869b5132.exe
Size

271KB
MD5

ac0f035eb0ad7e9bc1440b580a657b9a
SHA1

4d3657607dda4f556ac887b920e63dddac5ada85
SHA256

6a65c92c21ee1d2049857d7e311f7c00520d9bdb2cd9c72984dfccc0869b5132
SHA512

698eedcf840b6838aa3fa1b452b6e15ee846b5dfda8be9a514b4f5094c7fe607db2cfa116a628fbbd373b7f1301c6bb908a74c7de722e2ae7905b7e7df31c40f

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://file-file-host4.com/tratata.php

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Arkei Stealer Payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1120-117-0x0000000000400000-0x000000000044A000-memory.dmp	family_arkei

C:\Users\Admin\AppData\Local\Temp\6a65c92c21ee1d2049857d7e311f7c00520d9bdb2cd9c72984dfccc0869b5132.exe
"C:\Users\Admin\AppData\Local\Temp\6a65c92c21ee1d2049857d7e311f7c00520d9bdb2cd9c72984dfccc0869b5132.exe"
1⤵
PID:1120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1120-115-0x00000000004B0000-0x00000000005FA000-memory.dmp

Filesize
1.3MB

Download
memory/1120-116-0x00000000004B0000-0x00000000005FA000-memory.dmp

Filesize
1.3MB

Download
memory/1120-117-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download