Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

af721407cd...18.exe

windows7-x64

10

af721407cd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af721407cd30e419933df7f2ddb818ce_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240820-qydklsvcmb

  • MD5

    af721407cd30e419933df7f2ddb818ce

  • SHA1

    eaeb86da088eba909e15ff9708589600a2fa6ecb

  • SHA256

    fed1e56b5d27619c445d6e4d5834ff1c6a6f82403fb238c891b3fcaae5aab53c

  • SHA512

    a7ba7ff32ec6216d3a3c14c8335a219c8a627bcc9bfb1e173d5c293e3597c3bead37d54bb33457e709568fe25de01e5c9d34fc0519235a40766ec719cfe3378e

  • SSDEEP

    24576:bZxTt/zLjG7dMbJ3Rs4zjXvqYMDpQ5IPqFJLeKZNiA89ZpP56vHcwpdljpU:bXTtDGibPs4X/sFQCP4SgMV9Zp/Qdl

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      af721407cd30e419933df7f2ddb818ce_JaffaCakes118

    • Size

      1.2MB

    • MD5

      af721407cd30e419933df7f2ddb818ce

    • SHA1

      eaeb86da088eba909e15ff9708589600a2fa6ecb

    • SHA256

      fed1e56b5d27619c445d6e4d5834ff1c6a6f82403fb238c891b3fcaae5aab53c

    • SHA512

      a7ba7ff32ec6216d3a3c14c8335a219c8a627bcc9bfb1e173d5c293e3597c3bead37d54bb33457e709568fe25de01e5c9d34fc0519235a40766ec719cfe3378e

    • SSDEEP

      24576:bZxTt/zLjG7dMbJ3Rs4zjXvqYMDpQ5IPqFJLeKZNiA89ZpP56vHcwpdljpU:bXTtDGibPs4X/sFQCP4SgMV9Zp/Qdl

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks