Overview

overview

10

Static

static

SecuriteIn...39.exe

windows7_x64

10

SecuriteIn...39.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.MSIL.Formbook.NUM.MTB.2339.31760

  • Size

    1.5MB

  • Sample

    220520-wekgpsbbe3

  • MD5

    3c4b2b063479b125c6e807ebcec61fef

  • SHA1

    38ae16f7928bca6ce1cb9d307604bcfa9be2da43

  • SHA256

    1ee02de26540eaa184f366e18366bda9ab636c9ce1918ff17eab10d9455c1a6c

  • SHA512

    9175713a088a075c56ce1449d4c1317b1025624f7f7a27c05f0447fec0db4b26e9c045c723cb0a2e0581a83688cd4ef45e16a4cd25eefc9c52e13cb0ff47317a

Score
10/10
arkeispywarestealer

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.MSIL.Formbook.NUM.MTB.2339.31760

    • Size

      1.5MB

    • MD5

      3c4b2b063479b125c6e807ebcec61fef

    • SHA1

      38ae16f7928bca6ce1cb9d307604bcfa9be2da43

    • SHA256

      1ee02de26540eaa184f366e18366bda9ab636c9ce1918ff17eab10d9455c1a6c

    • SHA512

      9175713a088a075c56ce1449d4c1317b1025624f7f7a27c05f0447fec0db4b26e9c045c723cb0a2e0581a83688cd4ef45e16a4cd25eefc9c52e13cb0ff47317a

    Score
    10/10
    arkeistealerspyware

    • Arkei

      Arkei is an infostealer written in C++.

      stealerarkei

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks