General
-
Target
76a5c091eadb2f7fa5b4c37f58cd636c_JaffaCakes118
-
Size
1017KB
-
Sample
241028-adj9nawapd
-
MD5
76a5c091eadb2f7fa5b4c37f58cd636c
-
SHA1
371a471f04fdfb6c5971488767591ac83cad3c1b
-
SHA256
d2e17a3181e5836192c6d3099e9ae8031b37a252e92052cb5681f44c2abce7fd
-
SHA512
54dae260ccdecc8d9c89529e4eea5145aa7eeb467973f99d36e204bed48068f134fdab17f267f1faa03ec40cf7a18b6be353c6a565c1f07d3f8cfbca1d65ca2a
-
SSDEEP
12288:aIcFPM260CRFAIePtDaTqVEBT4xtp0lh4TDCZhFF7EYv2rhfOZ2ccoy6wfQxbixh:XcVcDslyqVCqt+46zzlvfly/Ma0JInhf
Static task
static1
Behavioral task
behavioral1
Sample
76a5c091eadb2f7fa5b4c37f58cd636c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
76a5c091eadb2f7fa5b4c37f58cd636c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
76a5c091eadb2f7fa5b4c37f58cd636c_JaffaCakes118
-
Size
1017KB
-
MD5
76a5c091eadb2f7fa5b4c37f58cd636c
-
SHA1
371a471f04fdfb6c5971488767591ac83cad3c1b
-
SHA256
d2e17a3181e5836192c6d3099e9ae8031b37a252e92052cb5681f44c2abce7fd
-
SHA512
54dae260ccdecc8d9c89529e4eea5145aa7eeb467973f99d36e204bed48068f134fdab17f267f1faa03ec40cf7a18b6be353c6a565c1f07d3f8cfbca1d65ca2a
-
SSDEEP
12288:aIcFPM260CRFAIePtDaTqVEBT4xtp0lh4TDCZhFF7EYv2rhfOZ2ccoy6wfQxbixh:XcVcDslyqVCqt+46zzlvfly/Ma0JInhf
Score10/10-
Ardamax family
-
Ardamax main executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-