General
-
Target
98b15443e550dae15aa0b62e7a0f33ea_JaffaCakes118
-
Size
810KB
-
Sample
241125-c25avazkdm
-
MD5
98b15443e550dae15aa0b62e7a0f33ea
-
SHA1
c611fb4003decf8a9269ba36f81ad9703e827f0e
-
SHA256
9aa1c3a579ea5def789c293a1c189c4948ca6a4baa72e96c9210d18af42859a4
-
SHA512
785964fd34814cd39cf926fee10d1004aa4b40df18bd0e4b886062d9a038fcce4e4b731cf2e26fb323dd033eb97267e80361f001df1e07a054f59a4fa64278db
-
SSDEEP
12288:PXYYzjmQ6JNyyojwHY2P66OhQykpMweH+BbFge0Yt2WDGenamsKbELfvld/9QE14:pipqwEhkpbhbFge0XG9nHsKbELfR9LML
Static task
static1
Behavioral task
behavioral1
Sample
98b15443e550dae15aa0b62e7a0f33ea_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
98b15443e550dae15aa0b62e7a0f33ea_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
98b15443e550dae15aa0b62e7a0f33ea_JaffaCakes118
-
Size
810KB
-
MD5
98b15443e550dae15aa0b62e7a0f33ea
-
SHA1
c611fb4003decf8a9269ba36f81ad9703e827f0e
-
SHA256
9aa1c3a579ea5def789c293a1c189c4948ca6a4baa72e96c9210d18af42859a4
-
SHA512
785964fd34814cd39cf926fee10d1004aa4b40df18bd0e4b886062d9a038fcce4e4b731cf2e26fb323dd033eb97267e80361f001df1e07a054f59a4fa64278db
-
SSDEEP
12288:PXYYzjmQ6JNyyojwHY2P66OhQykpMweH+BbFge0Yt2WDGenamsKbELfvld/9QE14:pipqwEhkpbhbFge0XG9nHsKbELfR9LML
-
Ardamax family
-
Ardamax main executable
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-