General
- Target 09f2b519e22c52721d33d5c3c0ac1f5e
- Size 2.5MB
- Sample220720-2hphqaahe6
- SHA256 e45414a2f8f7ca67e5438949f1ae1b6e0470007bcd8a55eb058cf87f6b078639
- MD5 09f2b519e22c52721d33d5c3c0ac1f5e
- SHA1 b451e08f7d58118cf62c87f426dd95dda5aabd3e
- SHA512 2cdf51fb04c5fae673d6d20cb3229e8c3fda932bf5a4ff167465d0d99407f1183792bb98dbf25d154d1fbc174a78e52da5bf38fae6fb82b6498fc2e50a6c1c5f
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
09f2b519e22c52721d33d5c3c0ac1f5e.exe
Resource
win7-20220715-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
Targets
-
- Target 09f2b519e22c52721d33d5c3c0ac1f5e
- Size 2.5MB
- SHA256 e45414a2f8f7ca67e5438949f1ae1b6e0470007bcd8a55eb058cf87f6b078639
- MD5 09f2b519e22c52721d33d5c3c0ac1f5e
- SHA1 b451e08f7d58118cf62c87f426dd95dda5aabd3e
- SHA512 2cdf51fb04c5fae673d6d20cb3229e8c3fda932bf5a4ff167465d0d99407f1183792bb98dbf25d154d1fbc174a78e52da5bf38fae6fb82b6498fc2e50a6c1c5f
- MD5 SHA1 SHA512
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext