General
-
Target
7ecb28ae735634d4a54bc4c04b9ee2fea9c28d964248d179b5277aff050da83d
-
Size
282KB
-
Sample
220123-xpb4ragdb6
-
MD5
84ce6ef40fe45773f5736d908eb40bfb
-
SHA1
52c98fe3b2f1a87dd3cdd541c202bed110f77925
-
SHA256
7ecb28ae735634d4a54bc4c04b9ee2fea9c28d964248d179b5277aff050da83d
-
SHA512
ec83c9f24604fd2b8ea145a3c92d8625aaee07751ec85f005013da8bd11322d73bf5fa83a620fb49c0463c937c63aa7406542a87df3b4eb9473e6f2079322965
Static task
static1
Malware Config
Extracted
arkei
Default
http://homesteadr.link/ggate.php
Targets
-
-
Target
7ecb28ae735634d4a54bc4c04b9ee2fea9c28d964248d179b5277aff050da83d
-
Size
282KB
-
MD5
84ce6ef40fe45773f5736d908eb40bfb
-
SHA1
52c98fe3b2f1a87dd3cdd541c202bed110f77925
-
SHA256
7ecb28ae735634d4a54bc4c04b9ee2fea9c28d964248d179b5277aff050da83d
-
SHA512
ec83c9f24604fd2b8ea145a3c92d8625aaee07751ec85f005013da8bd11322d73bf5fa83a620fb49c0463c937c63aa7406542a87df3b4eb9473e6f2079322965
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-