arkei | 9484a31f9311fcaeba75c53a32c64b2e264d659d2d1b65fb7a10fb1bd897efe2 | Triage

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
24-05-2022 19:42

Sharing

Report Analysis Logs

General

Target

1260-54-0x0000000000400000-0x000000000043D000-memory.exe
Size

244KB
MD5

f399791384a072143ab022fa02316d28
SHA1

26685225e1072fa306e012ca05c226acd7509897
SHA256

9484a31f9311fcaeba75c53a32c64b2e264d659d2d1b65fb7a10fb1bd897efe2
SHA512

0e30bdb6402392230d50dd10e7756fa9e547f82485c3889749f33c7960951e1a8662bba2044f7195202e8881901a871517955da27737ffb3d309f70f57ca6695

Score

10^/10

arkei stealer

Malware Config

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3392	2128	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\1260-54-0x0000000000400000-0x000000000043D000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1260-54-0x0000000000400000-0x000000000043D000-memory.exe"
1⤵
PID:2128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 224
  2⤵
  - Program crash
  PID:3392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2128 -ip 2128
1⤵
PID:4776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2128-130-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download