General

  • Target

    ardamaxkeylogger_9lT-Is1.exe

  • Size

    2.4MB

  • Sample

    240619-n7jrwavanp

  • MD5

    727281e834d0252ec2b1d44454528863

  • SHA1

    99e5623744350d78c4f3e090589ae151018323c8

  • SHA256

    cb1a73230353f03081703e2b511bf85a852f97d5e8891f3b7a3472e9201381d4

  • SHA512

    434cec1160c13accd0b5a51c79da8dff886272a371d2efa5475da218aaa8a15dee3f0e93af899a346c78cfef8a8edb401099af704bb3ba940b82662936b7a505

  • SSDEEP

    49152:RBuZrEUnje0NQq5rISAGFRjj9j6pjIMGFTKakd:3kLjNNC7eN9aEbJcd

Malware Config

Targets

    • Target

      ardamaxkeylogger_9lT-Is1.exe

    • Size

      2.4MB

    • MD5

      727281e834d0252ec2b1d44454528863

    • SHA1

      99e5623744350d78c4f3e090589ae151018323c8

    • SHA256

      cb1a73230353f03081703e2b511bf85a852f97d5e8891f3b7a3472e9201381d4

    • SHA512

      434cec1160c13accd0b5a51c79da8dff886272a371d2efa5475da218aaa8a15dee3f0e93af899a346c78cfef8a8edb401099af704bb3ba940b82662936b7a505

    • SSDEEP

      49152:RBuZrEUnje0NQq5rISAGFRjj9j6pjIMGFTKakd:3kLjNNC7eN9aEbJcd

    • Ardamax

      A keylogger first seen in 2013.

    • Ardamax main executable

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks