Analysis
-
max time kernel
125s -
max time network
140s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
24-01-2022 07:02
Static task
static1
Behavioral task
behavioral1
Sample
84ce6ef40fe45773f5736d908eb40bfb.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
General
-
Target
84ce6ef40fe45773f5736d908eb40bfb.exe
-
Size
282KB
-
MD5
84ce6ef40fe45773f5736d908eb40bfb
-
SHA1
52c98fe3b2f1a87dd3cdd541c202bed110f77925
-
SHA256
7ecb28ae735634d4a54bc4c04b9ee2fea9c28d964248d179b5277aff050da83d
-
SHA512
ec83c9f24604fd2b8ea145a3c92d8625aaee07751ec85f005013da8bd11322d73bf5fa83a620fb49c0463c937c63aa7406542a87df3b4eb9473e6f2079322965
Malware Config
Extracted
Family
arkei
Botnet
Default
C2
http://homesteadr.link/ggate.php
Signatures
-
Arkei Stealer Payload 2 IoCs
Processes:
resource yara_rule behavioral2/memory/2936-119-0x00000000005A0000-0x00000000005BC000-memory.dmp family_arkei behavioral2/memory/2936-120-0x0000000000400000-0x000000000044E000-memory.dmp family_arkei