Overview

overview

10

Static

static

3

JaffaCakes...91.exe

windows10-2004-x64

10

JaffaCakes...91.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b9e55031b77243d2b17a67d2f25b8191

  • Size

    984KB

  • Sample

    250415-rznyeazths

  • MD5

    b9e55031b77243d2b17a67d2f25b8191

  • SHA1

    fe7ea6f6766ebfc2c54096620213ad20d4f9015d

  • SHA256

    8a1b3cc15fe66af281b5e7f3e6591ddcaf6b959c0122aded60cf6009ab6aa18d

  • SHA512

    d5052fb94a21a02777e8d5302be138296e9f16858f49ecb77959de106c44f3ab5950538b790052c9b1e94ced4f10643f816321042f146df37340163a2f8577c3

  • SSDEEP

    24576:HM+Rxd8qmBuUtMrXvFEz9VvGmA52wMeX/zBC0kYaz1rIsoB:HM+jVr/FwvO52wpuYaz1rIsoB

Score
10/10
ardamaxdiscoverykeyloggerpersistencestealer

Malware Config

Targets

    • Target

      JaffaCakes118_b9e55031b77243d2b17a67d2f25b8191

    • Size

      984KB

    • MD5

      b9e55031b77243d2b17a67d2f25b8191

    • SHA1

      fe7ea6f6766ebfc2c54096620213ad20d4f9015d

    • SHA256

      8a1b3cc15fe66af281b5e7f3e6591ddcaf6b959c0122aded60cf6009ab6aa18d

    • SHA512

      d5052fb94a21a02777e8d5302be138296e9f16858f49ecb77959de106c44f3ab5950538b790052c9b1e94ced4f10643f816321042f146df37340163a2f8577c3

    • SSDEEP

      24576:HM+Rxd8qmBuUtMrXvFEz9VvGmA52wMeX/zBC0kYaz1rIsoB:HM+jVr/FwvO52wpuYaz1rIsoB

    Score
    10/10
    ardamaxdiscoverykeyloggerpersistencestealer

    • Ardamax

      A keylogger first seen in 2013.

      keyloggerstealerardamax

    • Ardamax family

      ardamax

    • Ardamax main executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks