arkei | f5d6e5e4b06d5597f705053b15db15b8cbcb33c40c5437cda4d90af430a218fa | Triage

Sharing

General

Target

185.4.65.203_-_update.exe___b78436c8bdcd14b81c4a828651ef8f6a.dat
Size

159KB
Sample

220720-k8y2eaedan
MD5

b78436c8bdcd14b81c4a828651ef8f6a
SHA1

bee132bfbb59e41b02dd0fbd65ba3eba2a3a5c17
SHA256

f5d6e5e4b06d5597f705053b15db15b8cbcb33c40c5437cda4d90af430a218fa
SHA512

9b7db48478eee118b708cd34d4e0755705e5437c476fc2c73875ec72582a93a657b6779808d36f7a358272d262048605a5b56809c6b32800dcf7e0ca493d413a

Score

10^/10

arkei default discovery spyware stealer

Malware Config

Extracted

Family

arkei

Botnet

Default

Targets

- Target
  
  185.4.65.203_-_update.exe___b78436c8bdcd14b81c4a828651ef8f6a.dat
- Size
  
  159KB
- MD5
  
  b78436c8bdcd14b81c4a828651ef8f6a
- SHA1
  
  bee132bfbb59e41b02dd0fbd65ba3eba2a3a5c17
- SHA256
  
  f5d6e5e4b06d5597f705053b15db15b8cbcb33c40c5437cda4d90af430a218fa
- SHA512
  
  9b7db48478eee118b708cd34d4e0755705e5437c476fc2c73875ec72582a93a657b6779808d36f7a358272d262048605a5b56809c6b32800dcf7e0ca493d413a
Score

10^/10

arkei default discovery spyware stealer
- Arkei
  Arkei is an infostealer written in C++.
  stealer arkei
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

arkeidefaultdiscoveryspywarestealer

behavioral2

arkeidefaultdiscoveryspywarestealer