Resubmissions

02/02/2022, 12:29

220202-pnzjnaacg710

02/02/2022, 12:25

220202-pll6jsacc510

31/01/2022, 08:45

220131-knzr7sghbn8

General

  • Target
    2c35ee480e2ea480624011857326defe537063bb383824013a8f8a0b9182e3b1
  • Size 3.9MB
  • Sample220202-pll6jsacc5
  • SHA256 2c35ee480e2ea480624011857326defe537063bb383824013a8f8a0b9182e3b1
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      2c35ee480e2ea480624011857326defe537063bb383824013a8f8a0b9182e3b1
    • Size 3.9MB
    • SHA256 2c35ee480e2ea480624011857326defe537063bb383824013a8f8a0b9182e3b1
    • MD5 SHA1 SHA512
    Score
    10/10
    • Arkei

      Arkei is an infostealer written in C++.

    • Arkei Stealer Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks