arkei | e6da071ea6626fddcdcf0b8f9ce3d2cb618d2e55a79f9cfc7fa881af1a2ff504 | Triage

Analysis

max time kernel
135s
max time network
142s
platform
windows10_x64
resource
win10-en-20211208
submitted
23-01-2022 08:54

Sharing

Report Analysis Logs

General

Target

e6da071ea6626fddcdcf0b8f9ce3d2cb618d2e55a79f9cfc7fa881af1a2ff504.exe
Size

282KB
MD5

f33a61a3f592f47f0424ef9117e99861
SHA1

6dab38b5c66b318768a5bb0730d64f6a209c37cc
SHA256

e6da071ea6626fddcdcf0b8f9ce3d2cb618d2e55a79f9cfc7fa881af1a2ff504
SHA512

0b0dbe2ecd9beda68462611e7e4e94efb9a8b2af76fa5dc1acdbc5b3380772e43296018bf59871794cd712623252f6754abacdb1d396283c1c6e4fb3e1d32fef

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://file-file-host4.com/tratata.php

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Arkei Stealer Payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2496-117-0x0000000000400000-0x000000000044E000-memory.dmp	family_arkei

C:\Users\Admin\AppData\Local\Temp\e6da071ea6626fddcdcf0b8f9ce3d2cb618d2e55a79f9cfc7fa881af1a2ff504.exe
"C:\Users\Admin\AppData\Local\Temp\e6da071ea6626fddcdcf0b8f9ce3d2cb618d2e55a79f9cfc7fa881af1a2ff504.exe"
1⤵
PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2496-115-0x0000000000450000-0x00000000004FE000-memory.dmp

Filesize
696KB

Download
memory/2496-116-0x0000000000450000-0x00000000004FE000-memory.dmp

Filesize
696KB

Download
memory/2496-117-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download