Extracted

• • Target

    c634d3b81cf3991d24b037fdb80bacfb576216c3768149432b3e799583ef7b21

  • Size

    281KB

  • MD5

    a131f7c0c6109b3d701767b24a1ec9b8

  • SHA1

    2d42e6211039255898af5606ce8f7c60b31782de

  • SHA256

    c634d3b81cf3991d24b037fdb80bacfb576216c3768149432b3e799583ef7b21

  • SHA512

    a7724856692645bf37c3504771895cda1d75e9d09a9b15d923e0bd5aa323c9949ff5fe790724eb89b4cdeb3631688b5d07edb2d2bdbb2ef6462ac72cebd001fd

  • SSDEEP

    6144:8oTJaMlWeC/iKbHiiq1YmNin91Izx2KQcVWMo4:8uzlWeC/iKbfeSnox7

  Score

  10^/10

  arkeidefaultaspackv2discoverystealer

  • Arkei

    Arkei is an infostealer written in C++.

    stealerarkei

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2