Extracted

• • Target

    b553561126bb1445ae14ee5180b992689725a2d2c3e39217b4fe0870b05cd7ae

  • Size

    209KB

  • MD5

    837e602c1c99e5b1a1c222dae09ce30f

  • SHA1

    4de8c0574230139aa4f840ffda05e58ee9771f71

  • SHA256

    b553561126bb1445ae14ee5180b992689725a2d2c3e39217b4fe0870b05cd7ae

  • SHA512

    b9f62a027900bbcd4368ecb95630186ff99657c94397d3d96c13e0522ccbeb7b947c8225272614511c117b9e81334ab5c4e46db3b70d387e7e38dafdd5f8b36f

  • SSDEEP

    3072:0744wqfFImJjYd4LOy4W5l1df8NduLtDLmPaZqL1ylO/fHFyGEjgjdHg20cTSVFU:fEbJ24LOK3Z6PIa1yCfH8GjpHg2cn74

  Score

  10^/10

  amadeycollectionspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Amadey credential stealer module

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1