General
- Target df4628f34c7535ff008df2aaa1f95a453b3dc5daadaa2d0150ce9ae7289a5aea
- Size 271KB
- Sample220204-dn7pgsehan
- SHA256 df4628f34c7535ff008df2aaa1f95a453b3dc5daadaa2d0150ce9ae7289a5aea
- MD5 4aee42686ebd164bfb2f5a1e079ff3e0
- SHA1 4810b1a9a2d57d87d1805b959b7900a4b1c8b943
- SHA512 54efef7d324e7efcd88e565c2018204ec6007e554a21f0a89e59738c31508d466cd504478e32cacc07cbbd09c5d11e11fedeb2de05cf8a0cd13989bd6115155f
- MD5 SHA1 SHA512
Static task
static1
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
C2
-
http://coin-file-file-19.com/tratata.php
Targets
-
- Target df4628f34c7535ff008df2aaa1f95a453b3dc5daadaa2d0150ce9ae7289a5aea
- Size 271KB
- SHA256 df4628f34c7535ff008df2aaa1f95a453b3dc5daadaa2d0150ce9ae7289a5aea
- MD5 4aee42686ebd164bfb2f5a1e079ff3e0
- SHA1 4810b1a9a2d57d87d1805b959b7900a4b1c8b943
- SHA512 54efef7d324e7efcd88e565c2018204ec6007e554a21f0a89e59738c31508d466cd504478e32cacc07cbbd09c5d11e11fedeb2de05cf8a0cd13989bd6115155f
- MD5 SHA1 SHA512
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.