Overview

overview

10

Static

static

10

2372-1-0x0...ry.exe

windows7-x64

10

2372-1-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2372-1-0x0000000000400000-0x000000000043D000-memory.dmp

  • Size

    244KB

  • Sample

    230907-z8by7sec48

  • MD5

    1775fdce5e3ab5f34f4ec41ca7888188

  • SHA1

    5e8fbeaf64b53fa1c16598fd60cf00303f64e936

  • SHA256

    ea1ca5d3d58a4873760f6f96d84b15f638b9a47a1f13ebdf84f3577e407dada7

  • SHA512

    adf85d0a52b9f4bf03e784a2c9fa30eabcfb3dbe29d97d81fbec8fb7702a1475b6c499074d01783fb9f2214f8ee8563a85f84a359caba129000541bf5505d783

  • SSDEEP

    3072:Um/E8k9ZjpIL+zNch12KbAwSaSVJSp81b8EG:N/E8k91zz6/tq8EG

Score
10/10
arkeimarsstealerdefaultstealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

C2

dispatchweekly.com/b2ecfe73736f99f5.php

Targets

    • Target

      2372-1-0x0000000000400000-0x000000000043D000-memory.dmp

    • Size

      244KB

    • MD5

      1775fdce5e3ab5f34f4ec41ca7888188

    • SHA1

      5e8fbeaf64b53fa1c16598fd60cf00303f64e936

    • SHA256

      ea1ca5d3d58a4873760f6f96d84b15f638b9a47a1f13ebdf84f3577e407dada7

    • SHA512

      adf85d0a52b9f4bf03e784a2c9fa30eabcfb3dbe29d97d81fbec8fb7702a1475b6c499074d01783fb9f2214f8ee8563a85f84a359caba129000541bf5505d783

    • SSDEEP

      3072:Um/E8k9ZjpIL+zNch12KbAwSaSVJSp81b8EG:N/E8k91zz6/tq8EG

    Score
    10/10
    arkeistealer

    • Arkei

      Arkei is an infostealer written in C++.

      stealerarkei

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks