ardamax | ac52018b88643cdcf2e7f0bd07c3e4043454a6b5b665f7ab4144281dc2dd27d5 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...b7.exe

windows7-x64

JaffaCakes...b7.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_a3e4d2bb2ba32428384839bb95328cb7
Size

140KB
Sample

250205-1a4f8svlhn
MD5

a3e4d2bb2ba32428384839bb95328cb7
SHA1

d35db8eeae2da93ecc21ca0c63e5c1ee1336c51d
SHA256

ac52018b88643cdcf2e7f0bd07c3e4043454a6b5b665f7ab4144281dc2dd27d5
SHA512

72f32cd1939c7f259434d4a4e0f658babc4c097633281ec6e110e3560d51097b8f72b65c440673cbe3509dd1269e0facaeb45f868e0b1da33f95c51371a0b861
SSDEEP

3072:67uG39Vk4ML6h2F9CbcajLhVRNWgxqqgvepvCE5p+7m:zG3Hxhw0NhVRNWgxJgvGCE506

Score

10^/10

ardamax discovery keylogger stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_a3e4d2bb2ba32428384839bb95328cb7.exe

Resource

win7-20241023-en

ardamax discovery keylogger stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_a3e4d2bb2ba32428384839bb95328cb7.exe

Resource

win10v2004-20241007-en

ardamax discovery keylogger stealer

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_a3e4d2bb2ba32428384839bb95328cb7
- Size
  
  140KB
- MD5
  
  a3e4d2bb2ba32428384839bb95328cb7
- SHA1
  
  d35db8eeae2da93ecc21ca0c63e5c1ee1336c51d
- SHA256
  
  ac52018b88643cdcf2e7f0bd07c3e4043454a6b5b665f7ab4144281dc2dd27d5
- SHA512
  
  72f32cd1939c7f259434d4a4e0f658babc4c097633281ec6e110e3560d51097b8f72b65c440673cbe3509dd1269e0facaeb45f868e0b1da33f95c51371a0b861
- SSDEEP
  
  3072:67uG39Vk4ML6h2F9CbcajLhVRNWgxqqgvepvCE5p+7m:zG3Hxhw0NhVRNWgxJgvGCE506
Score

10^/10

ardamax discovery keylogger stealer
- Ardamax
  A keylogger first seen in 2013.
  keylogger stealer ardamax
- Ardamax family
  ardamax
- Ardamax main executable
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ardamaxdiscoverykeyloggerstealer

behavioral2

ardamaxdiscoverykeyloggerstealer

© 2018-2025

Terms | Privacy