Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
04-10-2023 01:44
General
-
Target
bd4f4c87a3ac6bf8e8d4b51c2e02e09e.exe
-
Size
244KB
-
MD5
bd4f4c87a3ac6bf8e8d4b51c2e02e09e
-
SHA1
9009f36560c4fd6aefaa6996e510cd19c1f7e5ed
-
SHA256
b7ccb7951d2cca3278aad5e3088ef7a08c095e9715b7d9abbcca283997ca0bff
-
SHA512
cdf9ad9fb0e4c168c6b5eb096a54ac9e8cf200a8a2dba06889e7c6460ba2bd94558bd438e1631e525eacdbe36c548d0709d97cbaaffc039840f8f9ea550401dc
-
SSDEEP
3072:Um/E8k9ZjpIn+zNch12KbAwSaSKJSp8Ub8EG:N/E8k91rz6/tc8EG
Score
10/10
Malware Config
Signatures
-
Arkei
Arkei is an infostealer written in C++.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bd4f4c87a3ac6bf8e8d4b51c2e02e09e.exe"C:\Users\Admin\AppData\Local\Temp\bd4f4c87a3ac6bf8e8d4b51c2e02e09e.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
244KB