Overview

overview

10

Static

static

3

LH ULT.exe

windows7-x64

10

LH ULT.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2559c882485bf545f259729381f2acb6_JaffaCakes118

  • Size

    926KB

  • Sample

    240704-kvsbpsvhmg

  • MD5

    2559c882485bf545f259729381f2acb6

  • SHA1

    d7d0b5e2afbaa036cd0d14a08477d5f646f281a5

  • SHA256

    8f9c4fc3f5b138a15cd755f7fea03a9c4bcaedc31a0c80f3300a1e8b8ad27c0c

  • SHA512

    f209ad3710161c262f3e23851494dd58c3e78704413d64a91fe8a175c71e9f656cb95d0f4a0b9fa7a6977b2f5e69c379775d9d994b34a9f5d47b941ccb0dc322

  • SSDEEP

    12288:6G6Zozi2vtYjFE7s0IRZ0S4DcynfmpEI0cxMWbIkTx0BMWK7r4B44wj4ikA0HHy2:oZybiRZ0tc2fwEIbOkN047cBxS4XvHv

Score
10/10
ardamaxdiscoveryevasionkeyloggerpersistencestealer

Malware Config

Targets

    • Target

      LH ULT.exe

    • Size

      1.8MB

    • MD5

      9370f3c5c9d3c39b2c1d9fc7be45ec43

    • SHA1

      4640456dd0e891f0a3671147fb5e841b16132c9f

    • SHA256

      59775e1d0a558fbeab5be94e59872dbd790ec9d71cd8df541bf5f385ee1cffb3

    • SHA512

      bf375e5ecefa9a57c4630f7dbd39f98dab20e498f7e40d53389a3979559e31d669055190a92a9ccc3c27efc38ef4128369402959d83b50533f9758cc98f6f3bd

    • SSDEEP

      24576:xOOc3veWFazdRci6TJo5UrDRB5Gu4zlIsjGZqVY0gc8p:0e6azduiWo5UrDHEnRjEqXYp

    Score
    10/10
    ardamaxdiscoveryevasionkeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax main executable

    • Disables RegEdit via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks