Extracted

• • Target
    a4856b5512c2c5ba4aa42483b0b5eb5c.exe
  • Size 226KB
  • SHA256 ee7bd39d4d29eb7d605e5ee83da5247cfe11e14f397a76d64bb781fcc29ef583
  • MD5 a4856b5512c2c5ba4aa42483b0b5eb5c
  • SHA1 d246fe9cbcbd8df45e53a40528ec8b3b23c35353
  • SHA512 e39cd95a686bf850f85a9984b3a3b9efc06ac27a4abaaa284be0da111b612e4c0668b8db8ae7d3d1a38e1ca15e1cbbfa06e129ed1ee8cb73a1045c32f0e6ddac
  • MD5 SHA1 SHA512

  Score

  10^/10

  arkeidefaultdiscoveryspywarestealer

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2