General
-
Target
e19b638bb283b116c234ab423a113427cf3e0497718befbab5a714dcc01d4498
-
Size
351KB
-
Sample
220125-bgaeasdfd3
-
MD5
5f09b36840fac327f0cee397ece797a5
-
SHA1
5b57a61d1895c68571d71ad47de9396e200392af
-
SHA256
e19b638bb283b116c234ab423a113427cf3e0497718befbab5a714dcc01d4498
-
SHA512
a2576cfd243ac781fe382c6cfa6698837cb9f97cf237101c9b089e8503fca3e3ab02b8605f171c70c277bf449427b61842893d075f7df0f02bee31121fc3cb9f
Static task
static1
Malware Config
Extracted
arkei
Default
http://coin-file-file-19.com/tratata.php
Targets
-
-
Target
e19b638bb283b116c234ab423a113427cf3e0497718befbab5a714dcc01d4498
-
Size
351KB
-
MD5
5f09b36840fac327f0cee397ece797a5
-
SHA1
5b57a61d1895c68571d71ad47de9396e200392af
-
SHA256
e19b638bb283b116c234ab423a113427cf3e0497718befbab5a714dcc01d4498
-
SHA512
a2576cfd243ac781fe382c6cfa6698837cb9f97cf237101c9b089e8503fca3e3ab02b8605f171c70c277bf449427b61842893d075f7df0f02bee31121fc3cb9f
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-