Overview

overview

10

Static

static

3

54a5f99822...a0.exe

windows7-x64

10

54a5f99822...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54a5f99822a066788b005a9eabe2dea0.bin

  • Size

    1.5MB

  • Sample

    240113-cfrgvsaabk

  • MD5

    54a5f99822a066788b005a9eabe2dea0

  • SHA1

    9f13c7eda44d609427c6b37655bf7b3d32e5abeb

  • SHA256

    45930aced8c185ad02fafc0f7299d48a44d14331fdc2cdf599bd3aa92faf82f1

  • SHA512

    2bca4f48fb8f9843d6b597087c8f7526890cca284b152fda89f16eef491b88d3b7c3e2a0bd5d74dddf2498e4be995c04259a537c87269f8406307ebeca563fcc

  • SSDEEP

    24576:UJd5dnADbdI0fRQMUYTY+uhqh98zeEQrtg6kgyD12S:CXdAHPRFjTYLS8zDug7gs7

Score
10/10
arkeistealer

Malware Config

Extracted

Family

arkei

C2

185.248.102.41/fixe%00/crate.php

Targets

    • Target

      54a5f99822a066788b005a9eabe2dea0.bin

    • Size

      1.5MB

    • MD5

      54a5f99822a066788b005a9eabe2dea0

    • SHA1

      9f13c7eda44d609427c6b37655bf7b3d32e5abeb

    • SHA256

      45930aced8c185ad02fafc0f7299d48a44d14331fdc2cdf599bd3aa92faf82f1

    • SHA512

      2bca4f48fb8f9843d6b597087c8f7526890cca284b152fda89f16eef491b88d3b7c3e2a0bd5d74dddf2498e4be995c04259a537c87269f8406307ebeca563fcc

    • SSDEEP

      24576:UJd5dnADbdI0fRQMUYTY+uhqh98zeEQrtg6kgyD12S:CXdAHPRFjTYLS8zDug7gs7

    Score
    10/10
    arkeistealer

    • Arkei

      Arkei is an infostealer written in C++.

      stealerarkei

    • CustAttr .NET packer

      Detects CustAttr .NET packer in memory.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks