arkei | 6a5896d5f1ed79baa07aa2c2d596a956b562ef62fbaf77c137c2e0fa224033aa | Triage

Sharing

General

Target

1880-1-0x0000000000400000-0x000000000043D000-memory.dmp
Size

244KB
Sample

230919-cnl74sgd88
MD5

0444f1a6bd66adc3cd3f6f8a005c57b9
SHA1

6b59dc29ff5f607c8e99fd55ccc7891297c4d20c
SHA256

6a5896d5f1ed79baa07aa2c2d596a956b562ef62fbaf77c137c2e0fa224033aa
SHA512

3afff79a47e3dd67c3326e36b37c1e637c957d90843a2d46c1e384305098fee49f4275c641e4802ac6a61734b50bff976892bdca7f72fa53510a0ac9475fa282
SSDEEP

3072:Um/E8k9ZjpIL+zNch12KbAwSaShJSp8Ob8EG:N/E8k91zz6/tF8EG

Score

10^/10

arkei marsstealer default stealer

Malware Config

Extracted

Family

marsstealer

Botnet

Default

C2

dispatchweekly.com/wp-admin/admin-ajax.php

Targets

- Target
  
  1880-1-0x0000000000400000-0x000000000043D000-memory.dmp
- Size
  
  244KB
- MD5
  
  0444f1a6bd66adc3cd3f6f8a005c57b9
- SHA1
  
  6b59dc29ff5f607c8e99fd55ccc7891297c4d20c
- SHA256
  
  6a5896d5f1ed79baa07aa2c2d596a956b562ef62fbaf77c137c2e0fa224033aa
- SHA512
  
  3afff79a47e3dd67c3326e36b37c1e637c957d90843a2d46c1e384305098fee49f4275c641e4802ac6a61734b50bff976892bdca7f72fa53510a0ac9475fa282
- SSDEEP
  
  3072:Um/E8k9ZjpIL+zNch12KbAwSaShJSp8Ob8EG:N/E8k91zz6/tF8EG
Score

10^/10

arkei stealer
- Arkei
  Arkei is an infostealer written in C++.
  stealer arkei
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

defaultmarsstealer

behavioral1

behavioral2