Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...17.exe

windows7-x64

10

JaffaCakes...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_78610a1c01b956ec6de2dbd22c534e17

  • Size

    480KB

  • Sample

    250316-b2zjxs1ry5

  • MD5

    78610a1c01b956ec6de2dbd22c534e17

  • SHA1

    83d23d36fb3131f5c8b1c6148ca0a096d9cfc9a6

  • SHA256

    2e369480cf6cb08b3320e3e4419328a4cf7896edd9bd279bd5f8978dcfc3fba5

  • SHA512

    8de1e4d9e176c2c277edb5dee68768d7bf15e9e0f4b225691fdadf93a32d659d15a05a113895e62c1895353ec3822cfb46a718084fc1a1fda0f4ef04942c37c6

  • SSDEEP

    12288:GlNiWbz7iiJlEgyiYWy8DSXd1GXqCNWPSPvIua/pzj1:0iWbvleiFy8DSt1G1NW6Pw3zB

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      JaffaCakes118_78610a1c01b956ec6de2dbd22c534e17

    • Size

      480KB

    • MD5

      78610a1c01b956ec6de2dbd22c534e17

    • SHA1

      83d23d36fb3131f5c8b1c6148ca0a096d9cfc9a6

    • SHA256

      2e369480cf6cb08b3320e3e4419328a4cf7896edd9bd279bd5f8978dcfc3fba5

    • SHA512

      8de1e4d9e176c2c277edb5dee68768d7bf15e9e0f4b225691fdadf93a32d659d15a05a113895e62c1895353ec3822cfb46a718084fc1a1fda0f4ef04942c37c6

    • SSDEEP

      12288:GlNiWbz7iiJlEgyiYWy8DSXd1GXqCNWPSPvIua/pzj1:0iWbvleiFy8DSt1G1NW6Pw3zB

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks