arkei | 3a950b6406e9f4098accf439b350ac1f56276e97a23c63394b0a558c96ec0ea8[.]bin

General

Target
3a950b6406e9f4098accf439b350ac1f56276e97a23c63394b0a558c96ec0ea8.bin
Size 93KB
Sample220204-rblhdaahbl
SHA256 3a950b6406e9f4098accf439b350ac1f56276e97a23c63394b0a558c96ec0ea8
MD5 8ca753bfe600c706450ed63844d97136
SHA1 63cb396f48c852efcb9d8e6925cf1eff5c33debf
SHA512 c52608b4c9f8f3fa2c3153413beb6e2ffd66778e173555fb94be70231dad760d018e776e321565f54eede1cb6e530305455dfdcdfe862250f529d56fd393acdb
SSDEEP 1536:oWTHVn5wa8TXvqHp6kzWgDaO3C54Gf3lagvHkMTafiyVDr1lVUo3jy0:oWTHVn8TXvc4O3CFvlaSED1PXj/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

C2

Arkei Stealer Payload 1 IoCs

stealer

resource	yara_rule
sample	family_arkei

IMPHASH 4c665f81387442ad965e3f4eba69f083
SHA256 3a950b6406e9f4098accf439b350ac1f56276e97a23c63394b0a558c96ec0ea8
MD5 8ca753bfe600c706450ed63844d97136
SHA1 63cb396f48c852efcb9d8e6925cf1eff5c33debf
SHA512 c52608b4c9f8f3fa2c3153413beb6e2ffd66778e173555fb94be70231dad760d018e776e321565f54eede1cb6e530305455dfdcdfe862250f529d56fd393acdb
SSDEEP 1536:oWTHVn5wa8TXvqHp6kzWgDaO3C54Gf3lagvHkMTafiyVDr1lVUo3jy0:oWTHVn8TXvc4O3CFvlaSED1PXj/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22448

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths