General
-
Target
0f13e4847215e25fe45e6d05b0a6295f2edf9c76e62e7d7a02da57a337189149
-
Size
296KB
-
Sample
220124-sfjd9afbfq
-
MD5
3d72573dd789fd3a50b76926fbf4b9b4
-
SHA1
e44397333a476ab6c3c4a1b9226724c2671834e2
-
SHA256
0f13e4847215e25fe45e6d05b0a6295f2edf9c76e62e7d7a02da57a337189149
-
SHA512
bb134f2f19a715276e6ae64d6794aaeae216cc52f47577b45f8ca1c0fa9331a41bf09c6b8c6506a86159cfd52268a40ede57c24b5da9dccf6e5251f26ddd1aea
Static task
static1
Malware Config
Extracted
arkei
Default
http://coin-file-file-19.com/tratata.php
Targets
-
-
Target
0f13e4847215e25fe45e6d05b0a6295f2edf9c76e62e7d7a02da57a337189149
-
Size
296KB
-
MD5
3d72573dd789fd3a50b76926fbf4b9b4
-
SHA1
e44397333a476ab6c3c4a1b9226724c2671834e2
-
SHA256
0f13e4847215e25fe45e6d05b0a6295f2edf9c76e62e7d7a02da57a337189149
-
SHA512
bb134f2f19a715276e6ae64d6794aaeae216cc52f47577b45f8ca1c0fa9331a41bf09c6b8c6506a86159cfd52268a40ede57c24b5da9dccf6e5251f26ddd1aea
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-