arkei | 3ed025b8dbb995dd129ae1a6fbe6218d37b09266ba59e901d01bd225ad9513f0 | Triage

Analysis

max time kernel
134s
max time network
144s
platform
windows10_x64
resource
win10-en-20211208
submitted
23-01-2022 08:51

Sharing

Report Analysis Logs

General

Target

3ed025b8dbb995dd129ae1a6fbe6218d37b09266ba59e901d01bd225ad9513f0.exe
Size

264KB
MD5

a4885badd68cb607ca4941f78a03f9b2
SHA1

a3ba806e52a2e821f32fbc2b72906a93b4191ab8
SHA256

3ed025b8dbb995dd129ae1a6fbe6218d37b09266ba59e901d01bd225ad9513f0
SHA512

409c3963ff182172268d3407e89c6b4d5a8f08a2a85cb7c966ed0e6a56ab7d3ebffc8ab570edba6879cda58350cfb462c4450b430b37364d012643516c888a6d

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://file-file-host4.com/tratata.php

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Arkei Stealer Payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2668-117-0x0000000000400000-0x0000000000449000-memory.dmp	family_arkei

C:\Users\Admin\AppData\Local\Temp\3ed025b8dbb995dd129ae1a6fbe6218d37b09266ba59e901d01bd225ad9513f0.exe
"C:\Users\Admin\AppData\Local\Temp\3ed025b8dbb995dd129ae1a6fbe6218d37b09266ba59e901d01bd225ad9513f0.exe"
1⤵
PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2668-115-0x0000000000560000-0x0000000000571000-memory.dmp

Filesize
68KB

Download
memory/2668-116-0x00000000005A0000-0x00000000006EA000-memory.dmp

Filesize
1.3MB

Download
memory/2668-117-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download