Overview

overview

10

Static

static

10

848-54-0x0...ry.exe

windows7_x64

10

848-54-0x0...ry.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    138s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    08/05/2022, 08:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    848-54-0x0000000000400000-0x000000000043D000-memory.exe
  • Size 244KB
  • Sample220508-j68mdsffbk
  • SHA256 0d2c048dfb35513814ac9c6ac4760821581b765960f26d9b23dfdd5604721274
  • MD5 SHA1 SHA512
Score
10/10
arkeistealer

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\848-54-0x0000000000400000-0x000000000043D000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\848-54-0x0000000000400000-0x000000000043D000-memory.exe"
    1⤵
      PID:1032
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1032 -ip 1032
      1⤵
        PID:2288

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/1032-130-0x0000000000400000-0x000000000043D000-memory.dmp
            Download