Description
Arkei is an infostealer written in C++.
e7cd5251460ece03498f3b615864cfe9ee6da0addf0a3a6eda6d777185dcb888
274KB
220127-fv1kvsgbcj
d8b4f17ef642b437253a28ec3cd3e650
8a61d01b971185bc56e4a26cfcd8e1862f674ba2
e7cd5251460ece03498f3b615864cfe9ee6da0addf0a3a6eda6d777185dcb888
25e0bf1d80cbfea57f0886b75233a27d4c4c9a8140b51ff0ed1b415f83989d4420fc90650335778f399334be8c4aef33afbd6ce6e507466a7870c5ae7cf46639
Family | arkei |
Botnet | Default |
C2 |
http://coin-file-file-19.com/tratata.php |
e7cd5251460ece03498f3b615864cfe9ee6da0addf0a3a6eda6d777185dcb888
d8b4f17ef642b437253a28ec3cd3e650
274KB
8a61d01b971185bc56e4a26cfcd8e1862f674ba2
e7cd5251460ece03498f3b615864cfe9ee6da0addf0a3a6eda6d777185dcb888
25e0bf1d80cbfea57f0886b75233a27d4c4c9a8140b51ff0ed1b415f83989d4420fc90650335778f399334be8c4aef33afbd6ce6e507466a7870c5ae7cf46639
Arkei is an infostealer written in C++.
Looks up country code configured in the registry, likely geofence.
Infostealers often target stored browser data, which can include saved credentials etc.
Looks up Uninstall key entries in the registry to enumerate software on the system.