Extracted

• • Target

    Anwuqahpedbnnlsgekmacy.bin

  • Size

    576KB

  • MD5

    6033fc2cf6e73f5ca5cf76206d4f2232

  • SHA1

    a01fae21dfd9319f332c3cb717f8a8467514e8ce

  • SHA256

    eaa5fb40a306c308eead3848fe6b4c16c7b271ddc63a89cc876b54248f8b1d08

  • SHA512

    795df2b76dd23c09e5e90d1b5f2f4b88d1be8b44eb072001fb1bdfca210a6106a38cdafdc4df4e429f7acbbf5c8be3fe093e906280571acbf4458c9c6563233a

  Score

  10^/10

  arkeidefaultspywarestealersuricata

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei

  • suricata: ET MALWARE Base64 Encoded Stealer Config from Server - APPDATA or USERPROFILE Environment Variable M4

    suricata: ET MALWARE Base64 Encoded Stealer Config from Server - APPDATA or USERPROFILE Environment Variable M4

    suricata

  • suricata: ET MALWARE Win32/Vidar Variant/Mars Stealer CnC Exfil

    suricata: ET MALWARE Win32/Vidar Variant/Mars Stealer CnC Exfil

    suricata

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2