Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

7ebc7e3289...18.exe

windows7-x64

10

7ebc7e3289...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ebc7e32892eeed05f6306d0e98c2bc4_JaffaCakes118

  • Size

    291KB

  • Sample

    241030-l3vmgasmaj

  • MD5

    7ebc7e32892eeed05f6306d0e98c2bc4

  • SHA1

    1b9f6af255278a2ae5f624ce4659318801f5598a

  • SHA256

    021af6a0222c54d8ade50258753b1d0ffdc03c4499f1b1d185611b4285b78f30

  • SHA512

    22c9fa5144c46f18074c4c68299fc41642601d727cae1fa61962cdfe4315d5d751eb5e350f39b1ee4b131d798fe1df5da9b542b644ae3724399a3ee55d759ced

  • SSDEEP

    6144:WVwdcnGb45Teu+aK+82FziOfG3sLbcZpjwYDnHFhyYQ:EwdcnQJu/X82sOfG3sLbcZuYLHFhw

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      7ebc7e32892eeed05f6306d0e98c2bc4_JaffaCakes118

    • Size

      291KB

    • MD5

      7ebc7e32892eeed05f6306d0e98c2bc4

    • SHA1

      1b9f6af255278a2ae5f624ce4659318801f5598a

    • SHA256

      021af6a0222c54d8ade50258753b1d0ffdc03c4499f1b1d185611b4285b78f30

    • SHA512

      22c9fa5144c46f18074c4c68299fc41642601d727cae1fa61962cdfe4315d5d751eb5e350f39b1ee4b131d798fe1df5da9b542b644ae3724399a3ee55d759ced

    • SSDEEP

      6144:WVwdcnGb45Teu+aK+82FziOfG3sLbcZpjwYDnHFhyYQ:EwdcnQJu/X82sOfG3sLbcZuYLHFhw

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks