Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

940-54-0x0...ry.exe

windows7_x64

10

940-54-0x0...ry.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    26/06/2022, 08:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    940-54-0x0000000000400000-0x000000000043D000-memory.exe

  • Size

    244KB

  • MD5

    d84701e2305cc53212633857de170fdf

  • SHA1

    61eb84031441b85f0a884fc92a1c584dd12dd621

  • SHA256

    e84412e049f8a635c2313508a83be0b3464ee59e86ddbd7d0950e68d0369fcbe

  • SHA512

    8a83e7f9f26fed1db2558b26d0de59b99e747b4abfa3b1f2d60924b9f49a05a10576eb177f2649ea0846c5761f344622ec82497586de59055068eda8c7a6ea54

Score
10/10
arkeistealer

Malware Config

Signatures

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\940-54-0x0000000000400000-0x000000000043D000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\940-54-0x0000000000400000-0x000000000043D000-memory.exe"
    1⤵
      PID:2100
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2100 -s 216
        2⤵
        • Program crash
        PID:4056
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2100 -ip 2100
      1⤵
        PID:2948

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2100-130-0x0000000000400000-0x000000000043D000-memory.dmp

        Filesize

        244KB

        Download