Overview

overview

10

Static

static

1

6425d2a508...ba.exe

windows7-x64

10

6425d2a508...ba.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6425d2a508b8a9399fa2e99f536e4dba

  • Size

    3.6MB

  • Sample

    231222-e33jradecl

  • MD5

    6425d2a508b8a9399fa2e99f536e4dba

  • SHA1

    53749733ccd6a49cd6951bb9e4d0a676eeb72b11

  • SHA256

    0a8d06e600d240b442089a927590cc564a921884e130cc2d0d962be7463cec4e

  • SHA512

    ff4ada7de78ca947b4bd60965748b0a141b756477c1d3c74c52a154d3a10edee268e0c75159a929a16cbd2440d36f5bcf16a4382a39fc9f010dd32b495b4de31

  • SSDEEP

    49152:gLL9wqXFZAuJbEdSqXcZAuJbEdZ/FluraLxTsEStIxvoLZ:gLyQ3ISz3IZbur8kt

Score
10/10
arkeidefaultstealer

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

185.87.49.30/flat.php

Targets

    • Target

      6425d2a508b8a9399fa2e99f536e4dba

    • Size

      3.6MB

    • MD5

      6425d2a508b8a9399fa2e99f536e4dba

    • SHA1

      53749733ccd6a49cd6951bb9e4d0a676eeb72b11

    • SHA256

      0a8d06e600d240b442089a927590cc564a921884e130cc2d0d962be7463cec4e

    • SHA512

      ff4ada7de78ca947b4bd60965748b0a141b756477c1d3c74c52a154d3a10edee268e0c75159a929a16cbd2440d36f5bcf16a4382a39fc9f010dd32b495b4de31

    • SSDEEP

      49152:gLL9wqXFZAuJbEdSqXcZAuJbEdZ/FluraLxTsEStIxvoLZ:gLyQ3ISz3IZbur8kt

    Score
    10/10
    arkeidefaultstealer

    • Arkei

      Arkei is an infostealer written in C++.

      stealerarkei

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks