Triage | Behavioral Report

Analysis

max time kernel
125s
max time network
140s
platform
windows10_x64
resource
win10-en-20211208
submitted
24-01-2022 07:02

Sharing

Report Analysis Logs

General

Target

84ce6ef40fe45773f5736d908eb40bfb.exe
Size

282KB
MD5

84ce6ef40fe45773f5736d908eb40bfb
SHA1

52c98fe3b2f1a87dd3cdd541c202bed110f77925
SHA256

7ecb28ae735634d4a54bc4c04b9ee2fea9c28d964248d179b5277aff050da83d
SHA512

ec83c9f24604fd2b8ea145a3c92d8625aaee07751ec85f005013da8bd11322d73bf5fa83a620fb49c0463c937c63aa7406542a87df3b4eb9473e6f2079322965

Score

10^/10

arkei default stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://homesteadr.link/ggate.php

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Arkei Stealer Payload 2 IoCs

Processes:

resource	yara_rule
behavioral2/memory/2936-119-0x00000000005A0000-0x00000000005BC000-memory.dmp	family_arkei
behavioral2/memory/2936-120-0x0000000000400000-0x000000000044E000-memory.dmp	family_arkei

C:\Users\Admin\AppData\Local\Temp\84ce6ef40fe45773f5736d908eb40bfb.exe
"C:\Users\Admin\AppData\Local\Temp\84ce6ef40fe45773f5736d908eb40bfb.exe"
PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

00:00 00:00

Downloads

memory/2936-118-0x00000000001C0000-0x00000000001D1000-memory.dmp

Filesize
68KB

Download
memory/2936-119-0x00000000005A0000-0x00000000005BC000-memory.dmp

Filesize
112KB

Download
memory/2936-120-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download