Extracted

• • Target

    936d486812d594b81974dda463ddbd8967295902bea8f87b5cf4d6cd7e1c3a7d

  • Size

    244KB

  • MD5

    7a8331e1b844501b06c3d67a5f0cebf6

  • SHA1

    53d57d1fcb402db9de8e9c0fc7ba3b39ca2d2e51

  • SHA256

    936d486812d594b81974dda463ddbd8967295902bea8f87b5cf4d6cd7e1c3a7d

  • SHA512

    eef77d48c226d925526c9ae13e46ec69ddb2c5d83f5c9a11019f719d5b61d4079a441e2d3162e0f3a74a32c613790938ca3adf1760d6ea4cd5835f4eef9d4391

  • SSDEEP

    6144:EudLfC/iudEEQf86MqtI2zodgH+RWhf5SH3H:Eudaiuyf8EI7dgH+4hxSX

  Score

  10^/10

  amadeycollectionspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Amadey credential stealer module

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1