General

  • Target

    afa0662aa8eac0e607a9ffc85aa0bdfc570198dcb82dccdb40d0a459e12769dc

  • Size

    107KB

  • Sample

    220524-wblklabhh2

  • MD5

    b5129b33d2181343b31bd64ec340a599

  • SHA1

    f261991fd9607dd2f3d814c2fa69da994beae5f5

  • SHA256

    afa0662aa8eac0e607a9ffc85aa0bdfc570198dcb82dccdb40d0a459e12769dc

  • SHA512

    1c4c9c42d312362a3d8aadae124e8e45cc1be7617b32ab61c76f804396d7bf815596a8ee8ad4f8024ace00d405d4174cf1df703b9771aa0de921ac87a1730408

Malware Config

Extracted

Family

arkei

Botnet

Default

Targets

    • Target

      afa0662aa8eac0e607a9ffc85aa0bdfc570198dcb82dccdb40d0a459e12769dc

    • Size

      107KB

    • MD5

      b5129b33d2181343b31bd64ec340a599

    • SHA1

      f261991fd9607dd2f3d814c2fa69da994beae5f5

    • SHA256

      afa0662aa8eac0e607a9ffc85aa0bdfc570198dcb82dccdb40d0a459e12769dc

    • SHA512

      1c4c9c42d312362a3d8aadae124e8e45cc1be7617b32ab61c76f804396d7bf815596a8ee8ad4f8024ace00d405d4174cf1df703b9771aa0de921ac87a1730408

    • Arkei

      Arkei is an infostealer written in C++.

    • suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

      suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

    • suricata: ET MALWARE Generic gate .php GET with minimal headers

      suricata: ET MALWARE Generic gate .php GET with minimal headers

MITRE ATT&CK Matrix

Tasks