General

  • Target

    f2f08b30aba18370848c595dea4898ca_JaffaCakes118

  • Size

    598KB

  • Sample

    240923-xvpl2ayakj

  • MD5

    f2f08b30aba18370848c595dea4898ca

  • SHA1

    1b5b7976d97b84d9a2a129dbc459f86e77cf6773

  • SHA256

    76a0fa25a02e556fd260495b3497285bdd08b0e9f26d461dcdaeaffc3389ac40

  • SHA512

    92e6455f4b942d367df47271b5ac19d89d2c6329d1dac230f495c9e82a7618f32e737db897ae50b0752f14f1af36eb35430d86eb7a2232aeda83b5aa9f9447b5

  • SSDEEP

    12288:UXYcdWMIUSQLNyg7/Ye+JMyJMM66OhQykpMDnwtMNfrnOcjQY:qEL6NyUYeNyJMPhkpuwKFzOcjD

Malware Config

Targets

    • Target

      f2f08b30aba18370848c595dea4898ca_JaffaCakes118

    • Size

      598KB

    • MD5

      f2f08b30aba18370848c595dea4898ca

    • SHA1

      1b5b7976d97b84d9a2a129dbc459f86e77cf6773

    • SHA256

      76a0fa25a02e556fd260495b3497285bdd08b0e9f26d461dcdaeaffc3389ac40

    • SHA512

      92e6455f4b942d367df47271b5ac19d89d2c6329d1dac230f495c9e82a7618f32e737db897ae50b0752f14f1af36eb35430d86eb7a2232aeda83b5aa9f9447b5

    • SSDEEP

      12288:UXYcdWMIUSQLNyg7/Ye+JMyJMM66OhQykpMDnwtMNfrnOcjQY:qEL6NyUYeNyJMPhkpuwKFzOcjD

    • Ardamax

      A keylogger first seen in 2013.

    • Ardamax main executable

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.