arkei | 44845fb08fe9d982af06cc2cd37fadc3aeb478d3ac4f7d33770d1c05eb810b74

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2024 22:06

Target

68c0249faf22348de7b76a39773b86ad.exe
Size

239KB
MD5

68c0249faf22348de7b76a39773b86ad
SHA1

d2d41eb39b5d43f26ab28ffb960b8c581ecba07e
SHA256

44845fb08fe9d982af06cc2cd37fadc3aeb478d3ac4f7d33770d1c05eb810b74
SHA512

777f31dfce71758f93a2b5906d0c18be6f1d17111bad0aa268a982fa60db85f873bbdae76ccf2c5934cf9d4cfb7cd37b590a30b2b17c2b7e31d216bc712f022d
SSDEEP

3072:SSDihxLxuAS+j6lltXI1N1CO2tNKB85skvcCaxXbwDYT9Z9jPTsXDWcLsF2BAKJ:SSDAxLxuw+Y1vCjKcvK1b7THlQz7AK

Score

10^/10

arkei stealer

Arkei
Arkei is an infostealer written in C++.
stealer arkei
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1224 4260 WerFault.exe 68c0249faf22348de7b76a39773b86ad.exe

pid	pid_target	process	target process
1224	4260	WerFault.exe	68c0249faf22348de7b76a39773b86ad.exe

C:\Users\Admin\AppData\Local\Temp\68c0249faf22348de7b76a39773b86ad.exe
"C:\Users\Admin\AppData\Local\Temp\68c0249faf22348de7b76a39773b86ad.exe"
1⤵
PID:4260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 564
2⤵
- Program crash
PID:1224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4260 -ip 4260
1⤵
PID:4956

memory/4260-1-0x00000000024D0000-0x00000000025D0000-memory.dmp

Filesize
1024KB

Download
memory/4260-2-0x0000000002420000-0x0000000002439000-memory.dmp

Filesize
100KB

Download
memory/4260-3-0x0000000000400000-0x000000000215A000-memory.dmp

Filesize
29.4MB

Download
memory/4260-5-0x0000000000400000-0x000000000215A000-memory.dmp

Filesize
29.4MB

Download
memory/4260-6-0x00000000024D0000-0x00000000025D0000-memory.dmp

Filesize
1024KB

Download
memory/4260-8-0x0000000002420000-0x0000000002439000-memory.dmp

Filesize
100KB

Download