Analysis

  • max time kernel
    4294183s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20220310-en
  • submitted
    28/03/2022, 08:06

General

  • Target
    c6eb2ef8d00fcebf74253064a4da862e.exe
  • Size 296KB
  • Sample220328-jzd47sdcfj
  • SHA256 11a69bfb8a93253c13d7e6754d99a3bbedf0dc16d8b81b7ab1a2e8dc9a628bbf
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • arkei

Botnet
  • Default

C2
  • http://coin-file-file-19.com/tratata.php

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6eb2ef8d00fcebf74253064a4da862e.exe
    "C:\Users\Admin\AppData\Local\Temp\c6eb2ef8d00fcebf74253064a4da862e.exe"
    1⤵
      PID:1656

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/1656-54-0x000000000067E000-0x0000000000691000-memory.dmp

          memory/1656-56-0x0000000000220000-0x000000000023F000-memory.dmp

          memory/1656-55-0x000000000067E000-0x0000000000691000-memory.dmp

          memory/1656-57-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/1656-58-0x0000000075931000-0x0000000075933000-memory.dmp