Overview

overview

10

Static

static

3

89d6e35134...18.exe

windows7-x64

10

89d6e35134...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89d6e3513424b1df8375eb7c6c8d9692_JaffaCakes118

  • Size

    717KB

  • Sample

    241103-f5bdqawdrc

  • MD5

    89d6e3513424b1df8375eb7c6c8d9692

  • SHA1

    6a3c22e512eff2c468832a071850ed7cf0989340

  • SHA256

    7473e4aece71e09a6aaa41070eba6ddc1c311aac9c5c31b3dcfff5ead24ed3c6

  • SHA512

    cc11acee60eaf5429db63a06b6e9737a6a839ab97a1b1b658d80ed83965b5709e3b53899b08c3116b70251cc5d02c83b32288df295d94f38e1ab28b97570c4be

  • SSDEEP

    12288:tT2Xu16FQBWwqpiA3Z168xRWlSiYLsL1AroiNXhvVFvn462ME4WmwD:J2S8xwqr3T7xRsl12NRD/yQY

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      89d6e3513424b1df8375eb7c6c8d9692_JaffaCakes118

    • Size

      717KB

    • MD5

      89d6e3513424b1df8375eb7c6c8d9692

    • SHA1

      6a3c22e512eff2c468832a071850ed7cf0989340

    • SHA256

      7473e4aece71e09a6aaa41070eba6ddc1c311aac9c5c31b3dcfff5ead24ed3c6

    • SHA512

      cc11acee60eaf5429db63a06b6e9737a6a839ab97a1b1b658d80ed83965b5709e3b53899b08c3116b70251cc5d02c83b32288df295d94f38e1ab28b97570c4be

    • SSDEEP

      12288:tT2Xu16FQBWwqpiA3Z168xRWlSiYLsL1AroiNXhvVFvn462ME4WmwD:J2S8xwqr3T7xRsl12NRD/yQY

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks