Analysis
-
max time kernel
116s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
28-05-2022 00:34
General
-
Target
3702b5512d3d37bce8f288b800d11743b6f3a280df0d40aa57cd5080dffb1839.exe
-
Size
305KB
-
MD5
9242422a8bb443b9997a7606311a65a9
-
SHA1
a06cba7a08bd4c14e4e9655fedd584c9f2bd6093
-
SHA256
3702b5512d3d37bce8f288b800d11743b6f3a280df0d40aa57cd5080dffb1839
-
SHA512
c086ae7cf2b1b39a00106dd7bec75e283cc0d7f054d7893251109981381a9e7a08eb9e891b90bd16c50c56af6141d6bf7fc82fd38ab312491f8a835aa372df24
Score
10/10
Malware Config
Extracted
Family
arkei
Botnet
Dafault
C2
http://saskatche.link/gate1.php
Signatures
-
Arkei
Arkei is an infostealer written in C++.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3702b5512d3d37bce8f288b800d11743b6f3a280df0d40aa57cd5080dffb1839.exe"C:\Users\Admin\AppData\Local\Temp\3702b5512d3d37bce8f288b800d11743b6f3a280df0d40aa57cd5080dffb1839.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 832 -s 5562⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 832 -ip 8321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
124KB
-
Filesize
40.2MB
-
Filesize
40.2MB
-
Filesize
40.2MB