Overview

overview

10

Static

static

3

e47e6e2804...18.exe

windows7-x64

10

e47e6e2804...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e47e6e28041bf94f4eaad66eca1227de_JaffaCakes118

  • Size

    896KB

  • Sample

    241212-d26pcatmfk

  • MD5

    e47e6e28041bf94f4eaad66eca1227de

  • SHA1

    44b45b027df8b714868fe39c4137cc6b6ad9db74

  • SHA256

    f44c4d99f8689e531b01187a39b51906a2dd43c923af519bf0f0e2253c9dd59d

  • SHA512

    d87001df1165a1772d6c7db97f46ee634f569c4423b89cb5553032be12f68f76479c81079ecef49c74bc5fea867f38293dbf6633c4e6cd396f0e48bada269b8d

  • SSDEEP

    12288:oE4G9QemJ5zgORX/ka5Dau7gpCN+k8OAXav6q3vcjSyHGMm9teigKaD9cun35Q9Y:8G9TmJVgOF/LP78O8Og6v0TmaWAJQ9Y

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      e47e6e28041bf94f4eaad66eca1227de_JaffaCakes118

    • Size

      896KB

    • MD5

      e47e6e28041bf94f4eaad66eca1227de

    • SHA1

      44b45b027df8b714868fe39c4137cc6b6ad9db74

    • SHA256

      f44c4d99f8689e531b01187a39b51906a2dd43c923af519bf0f0e2253c9dd59d

    • SHA512

      d87001df1165a1772d6c7db97f46ee634f569c4423b89cb5553032be12f68f76479c81079ecef49c74bc5fea867f38293dbf6633c4e6cd396f0e48bada269b8d

    • SSDEEP

      12288:oE4G9QemJ5zgORX/ka5Dau7gpCN+k8OAXav6q3vcjSyHGMm9teigKaD9cun35Q9Y:8G9TmJVgOF/LP78O8Og6v0TmaWAJQ9Y

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks