Overview

overview

10

Static

static

3

17ec7b40d5...18.exe

windows7-x64

10

17ec7b40d5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17ec7b40d5c8baeeb1e7ae06ca3a8e43_JaffaCakes118

  • Size

    6.0MB

  • Sample

    241006-nq59jsweqd

  • MD5

    17ec7b40d5c8baeeb1e7ae06ca3a8e43

  • SHA1

    41f85f0918d25e68cb567cd68708aa057e037b09

  • SHA256

    e95ebb45afdac7356a97d3eb55d258455f6365015d58251d7c816a4cee30bbb6

  • SHA512

    1d6dbeb0662ab898577e1d622c1a3fe425a96c3b3e9072f8f92f94a3206b2d9bab4906b82708fd639a77f294052dc860e79ac150fd0856737dabfbc58c6a5188

  • SSDEEP

    98304:WULyZ0GkBkM+AII+/51I6awlp901a89e9SCcYRXKoVpb7ih4osB/m/d71leTNuWI:HLIoII+/jaGp94xm9X5VpbY4oskd71+2

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      17ec7b40d5c8baeeb1e7ae06ca3a8e43_JaffaCakes118

    • Size

      6.0MB

    • MD5

      17ec7b40d5c8baeeb1e7ae06ca3a8e43

    • SHA1

      41f85f0918d25e68cb567cd68708aa057e037b09

    • SHA256

      e95ebb45afdac7356a97d3eb55d258455f6365015d58251d7c816a4cee30bbb6

    • SHA512

      1d6dbeb0662ab898577e1d622c1a3fe425a96c3b3e9072f8f92f94a3206b2d9bab4906b82708fd639a77f294052dc860e79ac150fd0856737dabfbc58c6a5188

    • SSDEEP

      98304:WULyZ0GkBkM+AII+/51I6awlp901a89e9SCcYRXKoVpb7ih4osB/m/d71leTNuWI:HLIoII+/jaGp94xm9X5VpbY4oskd71+2

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks