Overview

overview

10

Static

static

3

8062eb5158...18.exe

windows7-x64

10

8062eb5158...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8062eb5158394d3ef8a0afac7a36dd0a_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241030-1thnwasbrr

  • MD5

    8062eb5158394d3ef8a0afac7a36dd0a

  • SHA1

    07ff8c747a39d0979a922520a1c89823e190ce40

  • SHA256

    dfcc00f17119301384ef82a765af6f64f5321eca03ed07c325e96a000069e726

  • SHA512

    393582048150c2c3de09ee90f7e16207c383bc723ef43b40506f4e4353a58f676f82dd34c0a8c9993d487a922374ffc4180b863345709eb0d3bf2683fbd27920

  • SSDEEP

    24576:LZxT5X9kxli2Goj2zLtCsWJ9QeX5qUrOJ9vWRB5thhkvFR3lzfv80:LXTB93h/tCXJ9x5qKe9vWRB5DWzX8

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      8062eb5158394d3ef8a0afac7a36dd0a_JaffaCakes118

    • Size

      1.1MB

    • MD5

      8062eb5158394d3ef8a0afac7a36dd0a

    • SHA1

      07ff8c747a39d0979a922520a1c89823e190ce40

    • SHA256

      dfcc00f17119301384ef82a765af6f64f5321eca03ed07c325e96a000069e726

    • SHA512

      393582048150c2c3de09ee90f7e16207c383bc723ef43b40506f4e4353a58f676f82dd34c0a8c9993d487a922374ffc4180b863345709eb0d3bf2683fbd27920

    • SSDEEP

      24576:LZxT5X9kxli2Goj2zLtCsWJ9QeX5qUrOJ9vWRB5thhkvFR3lzfv80:LXTB93h/tCXJ9x5qKe9vWRB5DWzX8

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks