Overview

overview

10

Static

static

10

ArdamaxKey...KV.exe

windows7-x64

3

ArdamaxKey...KV.exe

windows10-2004-x64

3

ArdamaxKey...WM.dll

windows7-x64

3

ArdamaxKey...WM.dll

windows10-2004-x64

3

ArdamaxKey...WM.exe

windows7-x64

6

ArdamaxKey...WM.exe

windows10-2004-x64

6

ArdamaxKey...WM.dll

windows7-x64

3

ArdamaxKey...WM.dll

windows10-2004-x64

3

ArdamaxKey...WM.chm

windows7-x64

1

ArdamaxKey...WM.chm

windows10-2004-x64

1

ArdamaxKey...WM.exe

windows7-x64

6

ArdamaxKey...WM.exe

windows10-2004-x64

6

ArdamaxKey...s.html

windows7-x64

3

ArdamaxKey...s.html

windows10-2004-x64

3

ArdamaxKey...��.htm

windows7-x64

3

ArdamaxKey...��.htm

windows10-2004-x64

3

ArdamaxKey...��.url

windows7-x64

1

ArdamaxKey...��.url

windows10-2004-x64

1

ArdamaxKey...��.url

windows7-x64

1

ArdamaxKey...��.url

windows10-2004-x64

1

ArdamaxKey...��.url

windows7-x64

1

ArdamaxKey...��.url

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30-09-2024 07:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ArdamaxKeylogger/ArdamaxKeylogger/Ardamax Keylogger/用firefox浏览器上网更安全.url

  • Size

    334B

  • MD5

    2f82495bbecfb4ac9ae75a17fd666bca

  • SHA1

    2fb870b6f9a822627a970b589f2f7f1e0fe20fd1

  • SHA256

    85e1cb8227a993c29f4add5fa8c6db6e8c52f1fcf0dddc2c8d943a8ca5fbc542

  • SHA512

    8b7476093e4e799beae92829dbff62c19eb55beff5c2cea7ebe6b99c6b98114e00113b8c026f7540f29f5186c97089781ba2d9cf8315de53463f73b304313126

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\ArdamaxKeylogger\ArdamaxKeylogger\Ardamax Keylogger\用firefox浏览器上网更安全.url"
    1⤵
      PID:2636

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2636-0-0x0000000001E20000-0x0000000001E21000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2636-1-0x0000000001E20000-0x0000000001E21000-memory.dmp

      Filesize

      4KB

      Download