Overview

overview

10

Static

static

10

1000-54-0x...ry.exe

windows7_x64

10

1000-54-0x...ry.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    91s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    24-05-2022 19:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1000-54-0x0000000000400000-0x000000000043D000-memory.exe

  • Size

    244KB

  • MD5

    6258d1dc7e5db0504fe914ca6c4f5721

  • SHA1

    638cfa7caacd4f3b9f447a53e63703bd62417ce8

  • SHA256

    ab30fe6ef1c0bf8b2ddb8321bc95066730b50b6f8b9f92bb2cd7c63f74f63ebc

  • SHA512

    f344b1c5ec27fc7ac0aa8b2a116f5b61ea3770dbc09dda5ad9898cf44d4385cf14d74bec0d3ca106bfa1f39a03955ea932e9e194de191c906793ac22b1bf029f

Score
10/10
arkeistealer

Malware Config

Signatures

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1000-54-0x0000000000400000-0x000000000043D000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1000-54-0x0000000000400000-0x000000000043D000-memory.exe"
    1⤵
      PID:3844
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3844 -s 216
        2⤵
        • Program crash
        PID:752
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3844 -ip 3844
      1⤵
        PID:3700

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3844-130-0x0000000000400000-0x000000000043D000-memory.dmp

        Filesize

        244KB

        Download