Overview

overview

10

Static

static

3

JaffaCakes...12.exe

windows7-x64

10

JaffaCakes...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6b189408b36bec7165f7eeff9565b412

  • Size

    271KB

  • Sample

    250103-jc596sxlap

  • MD5

    6b189408b36bec7165f7eeff9565b412

  • SHA1

    de75b73f331529558a4e27eddf80dad0beaef12b

  • SHA256

    5d0b483981ec7400db1a2503ed9b49e85e5fa334afc20415984fc4f63beb7a26

  • SHA512

    510af8659347ee15ad40d012b3160d9e79b67886d70d9b7f166a5ca0b6b3147d8993af745cf1e31a909700204aee4eb176025552ab75e766f7030d90727f22c1

  • SSDEEP

    6144:lov68l07T11n3CAz5ahG/dw/tc+32sO3LkFuvrqh24wvej1VH8xDQ:aGbdzchgdwln1ObkFB24Qy2W

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      JaffaCakes118_6b189408b36bec7165f7eeff9565b412

    • Size

      271KB

    • MD5

      6b189408b36bec7165f7eeff9565b412

    • SHA1

      de75b73f331529558a4e27eddf80dad0beaef12b

    • SHA256

      5d0b483981ec7400db1a2503ed9b49e85e5fa334afc20415984fc4f63beb7a26

    • SHA512

      510af8659347ee15ad40d012b3160d9e79b67886d70d9b7f166a5ca0b6b3147d8993af745cf1e31a909700204aee4eb176025552ab75e766f7030d90727f22c1

    • SSDEEP

      6144:lov68l07T11n3CAz5ahG/dw/tc+32sO3LkFuvrqh24wvej1VH8xDQ:aGbdzchgdwln1ObkFB24Qy2W

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks