Extracted

• • Target

    e99a9cfdf01caca0efdd6bb38d5ba59a9b32cf1c6f71e7fdb43e0e662457d332

  • Size

    244KB

  • MD5

    fe4f1ee66700b56d1795b8e7bc62780a

  • SHA1

    09be7a36c8cc12e22d68ad53c10c688016af8338

  • SHA256

    e99a9cfdf01caca0efdd6bb38d5ba59a9b32cf1c6f71e7fdb43e0e662457d332

  • SHA512

    dd2fa345c90dcf87f592b6a33fd8d01032e0a6d0b942de47ea0426a20c5f4175cbaa35609bff736ee91ee433295600eef092aac9f95ef72189b5d63361c65813

  • SSDEEP

    6144:zNFLiuRDMkV6N6zSnfemRk45ekrESNNUe:zNFnRDMGsnfemRVc3SNNB

  Score

  10^/10

  amadeycollectionspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Amadey credential stealer module

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1