Extracted

• • Target
    3e8307ec4f41763c93622f351eba6774.exe
  • Size 269KB
  • SHA256 13a68e687d6f5afa19b1cb993f3402f93dfbd3f2d7cc782c1912453ce877d381
  • MD5 3e8307ec4f41763c93622f351eba6774
  • SHA1 91c624f49334cda914b74f684cb5d7479283c178
  • SHA512 9da5e044ece6953d1d178ede82c544ed3d2a1b4a122ab22d81b2f74c31dfb31bb1e4a18a1424da7a49bda7f5326880473f7761316a8b091cbb0db3ae675ed38b
  • MD5 SHA1 SHA512

  Score

  10^/10

  arkeidefaultdiscoveryspywarestealersuricata

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei

  • suricata: ET MALWARE Win32/Arkei Stealer CnC Checkin (GET)

    suricata: ET MALWARE Win32/Arkei Stealer CnC Checkin (GET)

    suricata

  • suricata: ET MALWARE Win32/Arkei Stealer CnC Checkin (POST)

    suricata: ET MALWARE Win32/Arkei Stealer CnC Checkin (POST)

    suricata

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2