General

  • Target

    95b229600f28adfbe56fc09cd8a8ff88baf261329999f681613e5c951907d451

  • Size

    953KB

  • Sample

    220419-jgdeysacgn

  • MD5

    a9238e825430fcbd071dfb83a549db7f

  • SHA1

    d1bd4d8fcc306dde1ef19c9c6b70f9496c75e6e9

  • SHA256

    95b229600f28adfbe56fc09cd8a8ff88baf261329999f681613e5c951907d451

  • SHA512

    ed51e5ed077b3bc4e3d089b6e4d6ddf5a52f4e6ab19e5a2aef975aec046da28c22845e9ef43e574813b97aa0b51ec147a7904e17700bb3cd1fb8ef42cf5a8c17

Score
10/10

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

http://jsdkct.link/47747.php

Targets

    • Target

      95b229600f28adfbe56fc09cd8a8ff88baf261329999f681613e5c951907d451

    • Size

      953KB

    • MD5

      a9238e825430fcbd071dfb83a549db7f

    • SHA1

      d1bd4d8fcc306dde1ef19c9c6b70f9496c75e6e9

    • SHA256

      95b229600f28adfbe56fc09cd8a8ff88baf261329999f681613e5c951907d451

    • SHA512

      ed51e5ed077b3bc4e3d089b6e4d6ddf5a52f4e6ab19e5a2aef975aec046da28c22845e9ef43e574813b97aa0b51ec147a7904e17700bb3cd1fb8ef42cf5a8c17

    Score
    10/10
    • Arkei

      Arkei is an infostealer written in C++.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks