Overview

overview

10

Static

static

3

20a7d873ea...18.exe

windows7-x64

10

20a7d873ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20a7d873eab34580118f3ea484ce68e6_JaffaCakes118

  • Size

    3.5MB

  • Sample

    241008-kstrrasbja

  • MD5

    20a7d873eab34580118f3ea484ce68e6

  • SHA1

    2de068149b58c86ebaf121c86cbe7e7846fbefda

  • SHA256

    0a0ed365255f4f7903a96363e1b5f47e4f7881e68dd5159223a5c582cbfa9594

  • SHA512

    c7b7deb4f6b1e9906e8dd29734cbafce2fd22cb8372e9dd32b178729795b13a9f21f70092a24989661315f5305042a0c602d3f7ebe913e46d8001cb1fefeff43

  • SSDEEP

    49152:pjTxy51ivHndHvmMN3eN9ELfZ5sFjhXsC8nBr93qrjk0tKIXqiRfJkI+cZZp/UD7:3y3IZvTwOLf8Fj6zw9tTXqyfKPcrp8e0

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealerupx

Malware Config

Targets

    • Target

      20a7d873eab34580118f3ea484ce68e6_JaffaCakes118

    • Size

      3.5MB

    • MD5

      20a7d873eab34580118f3ea484ce68e6

    • SHA1

      2de068149b58c86ebaf121c86cbe7e7846fbefda

    • SHA256

      0a0ed365255f4f7903a96363e1b5f47e4f7881e68dd5159223a5c582cbfa9594

    • SHA512

      c7b7deb4f6b1e9906e8dd29734cbafce2fd22cb8372e9dd32b178729795b13a9f21f70092a24989661315f5305042a0c602d3f7ebe913e46d8001cb1fefeff43

    • SSDEEP

      49152:pjTxy51ivHndHvmMN3eN9ELfZ5sFjhXsC8nBr93qrjk0tKIXqiRfJkI+cZZp/UD7:3y3IZvTwOLf8Fj6zw9tTXqyfKPcrp8e0

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealerupx

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks