Analysis
- max time kernel
1s - max time network
30s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
07/01/2024, 19:20
General
- Target a2381438830c9dea5950abda8fa2cf4d.exe
- Size 1.1MB
- Sample240107-x2jpcsdca3
- SHA256 22b38ee022a7e7e2f55626a236607ce1985dcb049980802216eddce095842e25
Malware Config
Signatures
- Ardamax
A keylogger first seen in 2013.
- Ardamax main executable 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2381438830c9dea5950abda8fa2cf4d.exe"C:\Users\Admin\AppData\Local\Temp\a2381438830c9dea5950abda8fa2cf4d.exe"1⤵
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Arquivos de programas\jk.bat" "2⤵
-
-
C:\Windows\SysWOW64\28463\CJPO.exe"C:\Windows\system32\28463\CJPO.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
Olly.exe
@4B03.tmp
CJPO.exe
memory/2272-60-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-58-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-42-0x0000000002410000-0x0000000002411000-memory.dmp
memory/2272-47-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-50-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-53-0x0000000003280000-0x0000000003281000-memory.dmp
memory/2272-55-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-56-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-57-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-59-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-62-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-40-0x0000000002400000-0x0000000002401000-memory.dmp
memory/2272-61-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-37-0x00000000021C0000-0x000000000221A000-memory.dmp
memory/2272-41-0x00000000023F0000-0x00000000023F1000-memory.dmp
memory/2272-54-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-52-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-51-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-49-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-48-0x0000000003260000-0x0000000003261000-memory.dmp
memory/2272-46-0x0000000003210000-0x0000000003213000-memory.dmp
memory/2272-45-0x0000000003220000-0x0000000003221000-memory.dmp
memory/2272-44-0x0000000002390000-0x0000000002391000-memory.dmp
memory/2272-43-0x00000000023D0000-0x00000000023D1000-memory.dmp
memory/3720-63-0x0000000000400000-0x0000000000420000-memory.dmp
memory/3988-11-0x0000000000400000-0x0000000000408000-memory.dmp