Analysis
-
max time kernel
190s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
28-05-2022 01:12
General
-
Target
04584608efe95878a3a9bb3db4173fc4570475a281e1de046b043ab43f364ae2.exe
-
Size
279KB
-
MD5
4fd121e01b83bf7710685da75853564a
-
SHA1
83b3a576b0fb8b5bdc0ba03d07ecb06d5c5bcdc0
-
SHA256
04584608efe95878a3a9bb3db4173fc4570475a281e1de046b043ab43f364ae2
-
SHA512
835b3f714e9599703d789aa4c51d6cf814034b7581be5ba6873efcddd232ab94cb2499abde576fa85c00b96477a9e88395617db21dc802a03c4a9c484273849a
Score
10/10
Malware Config
Extracted
Family
arkei
Botnet
Dafault
C2
http://googr.link/gate1.php
Signatures
-
Arkei
Arkei is an infostealer written in C++.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\04584608efe95878a3a9bb3db4173fc4570475a281e1de046b043ab43f364ae2.exe"C:\Users\Admin\AppData\Local\Temp\04584608efe95878a3a9bb3db4173fc4570475a281e1de046b043ab43f364ae2.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4732 -s 5602⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4732 -ip 47321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
124KB
-
Filesize
448KB
-
Filesize
76KB
-
Filesize
124KB
-
Filesize
76KB
-
Filesize
448KB