General
- Target 71a63fa7419177239910ef20940b5da1.exe
- Size 204KB
- Sample211120-jxp4pacean
- SHA256 f41503e7b6f5ce811b27f8ff160b1b0d60a437d36c9db6327e254a910f405a4f
- MD5 71a63fa7419177239910ef20940b5da1
- SHA1 8ed778a268852a39c3991b3f8aedec381b93944b
- SHA512 7032cc874d58dc6f5d0342a9dd2aa829681f5265cc80a35811499807373d5b0bbfcd83296ee1742036ef875c5e131ab4eba4bfc07627f38665843d3eef17134a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
71a63fa7419177239910ef20940b5da1.exe
Resource
win7-en-20211104
0 signatures
0 seconds
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
C2
-
http://file-file-host4.com/tratata.php
Targets
-
- Target 71a63fa7419177239910ef20940b5da1.exe
- Size 204KB
- SHA256 f41503e7b6f5ce811b27f8ff160b1b0d60a437d36c9db6327e254a910f405a4f
- MD5 71a63fa7419177239910ef20940b5da1
- SHA1 8ed778a268852a39c3991b3f8aedec381b93944b
- SHA512 7032cc874d58dc6f5d0342a9dd2aa829681f5265cc80a35811499807373d5b0bbfcd83296ee1742036ef875c5e131ab4eba4bfc07627f38665843d3eef17134a
- MD5 SHA1 SHA512
-
Arkei Stealer Payload
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.