Overview

overview

10

Static

static

3

Install.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Install.exe

  • Size

    2.2MB

  • Sample

    241203-k31caatqeq

  • MD5

    672a0af8ae6ce97dcbd4247355a5d410

  • SHA1

    238345add938aefcd90836e03f9179bd900d7c8c

  • SHA256

    b8b7f974ed7603cf12d6953c9029b7c7e839c20d23a02f6cd3f4f14f8fe1e796

  • SHA512

    6984011d6d294e6b78abd68392d4636c667f03fef64e7462c89732cef687513ec62c49d87caa1e1e1d0188bf67921eb7802c57d6a93825c81f2237db42a6ba1f

  • SSDEEP

    49152:Q20UUaHdmZu15FVhFYbqbb/lc+g9IaWEKVaYz9:Q9dE2uXjYbqO+g21Vd

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      Install.exe

    • Size

      2.2MB

    • MD5

      672a0af8ae6ce97dcbd4247355a5d410

    • SHA1

      238345add938aefcd90836e03f9179bd900d7c8c

    • SHA256

      b8b7f974ed7603cf12d6953c9029b7c7e839c20d23a02f6cd3f4f14f8fe1e796

    • SHA512

      6984011d6d294e6b78abd68392d4636c667f03fef64e7462c89732cef687513ec62c49d87caa1e1e1d0188bf67921eb7802c57d6a93825c81f2237db42a6ba1f

    • SSDEEP

      49152:Q20UUaHdmZu15FVhFYbqbb/lc+g9IaWEKVaYz9:Q9dE2uXjYbqO+g21Vd

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks