arkei | 0e1a7e0a77a656d49e63aa5968dda90c78073682c993c63291f032d8fbe2aab7

Analysis

max time kernel
92s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04-02-2024 10:29

Target

8eeb43cd1498c17b43d55c9cf4eed715.exe
Size

233KB
MD5

8eeb43cd1498c17b43d55c9cf4eed715
SHA1

e9bdf26a692fdd41805c622dcca8a8f985e40395
SHA256

0e1a7e0a77a656d49e63aa5968dda90c78073682c993c63291f032d8fbe2aab7
SHA512

97f04889f3cb2f7451a6105bb81ee559c3d53a8d169c9a0a1bd4414f6cbe0e7158f7e26d4b4002e547031802ef819727b0b3c398ee78bc68fd496d592e81add1
SSDEEP

3072:yrDShZLKqYvn3IOY+IrQHZi21HG/5BU9lDrHSwDYT9Z9jPTsXDWcLsF2Byq:yrDQZLKqA3eQfyofy7THlQz7yq

Score

10^/10

arkei stealer

Arkei
Arkei is an infostealer written in C++.
stealer arkei
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4928 4684 WerFault.exe 8eeb43cd1498c17b43d55c9cf4eed715.exe

pid	pid_target	process	target process
4928	4684	WerFault.exe	8eeb43cd1498c17b43d55c9cf4eed715.exe

C:\Users\Admin\AppData\Local\Temp\8eeb43cd1498c17b43d55c9cf4eed715.exe
"C:\Users\Admin\AppData\Local\Temp\8eeb43cd1498c17b43d55c9cf4eed715.exe"
1⤵
PID:4684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 548
2⤵
- Program crash
PID:4928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4684 -ip 4684
1⤵
PID:2628

memory/4684-1-0x0000000002420000-0x0000000002520000-memory.dmp

Filesize
1024KB

Download
memory/4684-2-0x00000000022F0000-0x0000000002309000-memory.dmp

Filesize
100KB

Download
memory/4684-3-0x0000000000400000-0x0000000002158000-memory.dmp

Filesize
29.3MB

Download
memory/4684-5-0x0000000000400000-0x0000000002158000-memory.dmp

Filesize
29.3MB

Download