ardamax | dbd39ebcc24416d61a12ca6578636b2008674a64c357ee45c0687793ca0d695a | Triage

Submit
Reports

Overview

overview

Static

static

3

4010443b9e...18.exe

windows7-x64

4010443b9e...18.exe

windows10-2004-x64

3

Sharing

General

Target

4010443b9ed58a836bb5884b2894c2b0_JaffaCakes118
Size

648KB
Sample

241013-qjbsgashnp
MD5

4010443b9ed58a836bb5884b2894c2b0
SHA1

9d3b87c3826fb9decf8c0ba90916f3f19df1710b
SHA256

dbd39ebcc24416d61a12ca6578636b2008674a64c357ee45c0687793ca0d695a
SHA512

023d572d2ed60759d7b965e95a598b1487ade1a8d17a866c5b38fdf084eb124e8f002ee0ae52759e8d87c4fa06357ab8429d9746e8d6604d39f49e594cc61913
SSDEEP

12288:M3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/9AgHLo8OW+rB:2Dsj1dEcBcJ9nPx/igrp+

Score

10^/10

ardamax discovery keylogger stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4010443b9ed58a836bb5884b2894c2b0_JaffaCakes118.exe

Resource

win7-20240708-en

ardamax discovery keylogger stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

4010443b9ed58a836bb5884b2894c2b0_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  4010443b9ed58a836bb5884b2894c2b0_JaffaCakes118
- Size
  
  648KB
- MD5
  
  4010443b9ed58a836bb5884b2894c2b0
- SHA1
  
  9d3b87c3826fb9decf8c0ba90916f3f19df1710b
- SHA256
  
  dbd39ebcc24416d61a12ca6578636b2008674a64c357ee45c0687793ca0d695a
- SHA512
  
  023d572d2ed60759d7b965e95a598b1487ade1a8d17a866c5b38fdf084eb124e8f002ee0ae52759e8d87c4fa06357ab8429d9746e8d6604d39f49e594cc61913
- SSDEEP
  
  12288:M3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/9AgHLo8OW+rB:2Dsj1dEcBcJ9nPx/igrp+
Score

10^/10

ardamax discovery keylogger stealer
- Ardamax
  A keylogger first seen in 2013.
  keylogger stealer ardamax
- Ardamax main executable
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ardamaxdiscoverykeyloggerstealer

behavioral2

© 2018-2025

Terms | Privacy