Analysis
-
max time kernel
133s -
max time network
136s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
23-01-2022 01:48
Static task
static1
General
-
Target
65b5228f31fab7297ee4d8249a34f4bc661c5990d3c3dcfc2d9ae755a78d6f74.exe
-
Size
270KB
-
MD5
a4f4b007213aea454002b4eabdb756bd
-
SHA1
80561bdda45208d52bfff59ad4932ffe4b676525
-
SHA256
65b5228f31fab7297ee4d8249a34f4bc661c5990d3c3dcfc2d9ae755a78d6f74
-
SHA512
0da85e30f33d72f4d2ca2f8cf2662abf3122e6705bc688d64bc013df060a6725b95bc8659790f9a873b9f52fe739b3c8b89ecec3079bbf0f70f262e999bdce61
Malware Config
Extracted
Family
arkei
Botnet
Default
C2
http://file-file-host4.com/tratata.php
Signatures
-
Arkei Stealer Payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1628-116-0x00000000005C0000-0x00000000005DC000-memory.dmp family_arkei behavioral1/memory/1628-117-0x0000000000400000-0x000000000044A000-memory.dmp family_arkei