General
-
Target
04f269c22bdafb4dc643fe6af1e2099c523e8a039728d7879a9f502293664cf3
-
Size
2.9MB
-
Sample
221002-2ttxksfefp
-
MD5
723b6b59860ad907d476a5be2fb69dda
-
SHA1
40bb995ad8b8e67e003adc3a8e13ca17f0a133c3
-
SHA256
04f269c22bdafb4dc643fe6af1e2099c523e8a039728d7879a9f502293664cf3
-
SHA512
9cbcf12ffdc9cb15afc5b82730b45cc8d71c7a63a2427466456cc77fb1e0cae389ea2088566b400d5eb99057c613e3534a479ecf521ab687c41b57df90a948ef
-
SSDEEP
49152:eF/xZUMiV7ZP+AlW608NohBGNNJytYEXtGvHvycywASNYUrOQ2WG4V6y9OdSKLhL:oxZFiZjw6jNV8YWtJEASNjr4ry9uLhLH
Static task
static1
Behavioral task
behavioral1
Sample
04f269c22bdafb4dc643fe6af1e2099c523e8a039728d7879a9f502293664cf3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
04f269c22bdafb4dc643fe6af1e2099c523e8a039728d7879a9f502293664cf3.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
04f269c22bdafb4dc643fe6af1e2099c523e8a039728d7879a9f502293664cf3
-
Size
2.9MB
-
MD5
723b6b59860ad907d476a5be2fb69dda
-
SHA1
40bb995ad8b8e67e003adc3a8e13ca17f0a133c3
-
SHA256
04f269c22bdafb4dc643fe6af1e2099c523e8a039728d7879a9f502293664cf3
-
SHA512
9cbcf12ffdc9cb15afc5b82730b45cc8d71c7a63a2427466456cc77fb1e0cae389ea2088566b400d5eb99057c613e3534a479ecf521ab687c41b57df90a948ef
-
SSDEEP
49152:eF/xZUMiV7ZP+AlW608NohBGNNJytYEXtGvHvycywASNYUrOQ2WG4V6y9OdSKLhL:oxZFiZjw6jNV8YWtJEASNjr4ry9uLhLH
Score10/10-
Ardamax main executable
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-