General
- Target 7ef2a20b8d5500ad1152afcf4e97fe4b6dbfa42155053cc76699433867e49a1e
- Size 266KB
- Sample220131-mdv3dahaap
- SHA256 7ef2a20b8d5500ad1152afcf4e97fe4b6dbfa42155053cc76699433867e49a1e
- MD5 6adc3ffea65dbd3c4e3a649218504612
- SHA1 4965078545f3dd9d63b41a2f79511bd030666027
- SHA512 eb8d2b0c597b16479383f6c7fdf842ff862c053fc1e1db7b1d3d7c64f3531949f876452ba14e090291f62cd21e0578eec01569587123d795aa9ffafc48d26e15
- MD5 SHA1 SHA512
Static task
static1
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
C2
-
http://coin-file-file-19.com/tratata.php
Targets
-
- Target 7ef2a20b8d5500ad1152afcf4e97fe4b6dbfa42155053cc76699433867e49a1e
- Size 266KB
- SHA256 7ef2a20b8d5500ad1152afcf4e97fe4b6dbfa42155053cc76699433867e49a1e
- MD5 6adc3ffea65dbd3c4e3a649218504612
- SHA1 4965078545f3dd9d63b41a2f79511bd030666027
- SHA512 eb8d2b0c597b16479383f6c7fdf842ff862c053fc1e1db7b1d3d7c64f3531949f876452ba14e090291f62cd21e0578eec01569587123d795aa9ffafc48d26e15
- MD5 SHA1 SHA512
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.