General
-
Target
185.4.65.203_-_update.exe___b78436c8bdcd14b81c4a828651ef8f6a.dat
-
Size
159KB
-
Sample
220720-k8y2eaedan
-
MD5
b78436c8bdcd14b81c4a828651ef8f6a
-
SHA1
bee132bfbb59e41b02dd0fbd65ba3eba2a3a5c17
-
SHA256
f5d6e5e4b06d5597f705053b15db15b8cbcb33c40c5437cda4d90af430a218fa
-
SHA512
9b7db48478eee118b708cd34d4e0755705e5437c476fc2c73875ec72582a93a657b6779808d36f7a358272d262048605a5b56809c6b32800dcf7e0ca493d413a
Static task
static1
Behavioral task
behavioral1
Sample
185.4.65.203_-_update.exe___b78436c8bdcd14b81c4a828651ef8f6a.exe
Resource
win7-20220718-en
Malware Config
Extracted
arkei
Default
Targets
-
-
Target
185.4.65.203_-_update.exe___b78436c8bdcd14b81c4a828651ef8f6a.dat
-
Size
159KB
-
MD5
b78436c8bdcd14b81c4a828651ef8f6a
-
SHA1
bee132bfbb59e41b02dd0fbd65ba3eba2a3a5c17
-
SHA256
f5d6e5e4b06d5597f705053b15db15b8cbcb33c40c5437cda4d90af430a218fa
-
SHA512
9b7db48478eee118b708cd34d4e0755705e5437c476fc2c73875ec72582a93a657b6779808d36f7a358272d262048605a5b56809c6b32800dcf7e0ca493d413a
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-