Extracted

• • Target

    efcf2436a1c1a20eb798db02593889668a5dd36c1406b67343681ba46b64da58

  • Size

    209KB

  • MD5

    8ef9de35dad7f94140577af8e51cec3a

  • SHA1

    af2bfdf001c2dde2aec18fe3e6a555988d84686b

  • SHA256

    efcf2436a1c1a20eb798db02593889668a5dd36c1406b67343681ba46b64da58

  • SHA512

    bfa5f7e9884f2e73ae19ed5a9cc4ed5a20951f9911282156ef6fcfe604d49af03175f76398754c589ac7e7dca22e2533a385d7547291a634d169d1ba0af3c0e1

  • SSDEEP

    3072:UITVOwqFXgWRtCgG1OLz5WwaEj7Q+hlfEsNtOv4Kd1wDBa9XGcZs6IO4Rj71nx:rVmpVtCZ1OVaEXQ+f3IvTdySGcZLX4B

  Score

  10^/10

  amadeycollectionspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Amadey credential stealer module

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1