arkei | 88cae7ac71c688afd6133a4e60d9fa03bcce95ab418ed42dca641302e44a1715

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2024 17:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

88cae7ac71c688afd6133a4e60d9fa03bcce95ab418ed42dca641302e44a1715.exe
Size

244KB
MD5

400f62746567a0518352fad5c63b9ae4
SHA1

d35793eb49e822a993c04d418f90d83cbfc735b7
SHA256

88cae7ac71c688afd6133a4e60d9fa03bcce95ab418ed42dca641302e44a1715
SHA512

c699b87ef2af5c5a02ae523cc8a1639556230d78792b61379428e5a27104e28b6671737292e1629f326c026c2b3bb9fa455af53d92034b5803a62687d4373dcc
SSDEEP

3072:Um/E8k9ZjpIn+zNch12KbAwSaSrJSp8Kb8EG:N/E8k91rz6/tP8EG

Score

10^/10

arkei discovery stealer

Malware Config

Signatures

Arkei
Arkei is an infostealer written in C++.
stealer arkei
Arkei family
arkei

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	88cae7ac71c688afd6133a4e60d9fa03bcce95ab418ed42dca641302e44a1715.exe

C:\Users\Admin\AppData\Local\Temp\88cae7ac71c688afd6133a4e60d9fa03bcce95ab418ed42dca641302e44a1715.exe
"C:\Users\Admin\AppData\Local\Temp\88cae7ac71c688afd6133a4e60d9fa03bcce95ab418ed42dca641302e44a1715.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2172

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2172-0-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download