Extracted

• • Target

    523c6658b1007a69deee06bc8a1a4ae12ccacfb5182eeb696a75a08b74993453

  • Size

    390KB

  • MD5

    fe0f93404b15f80818aae121eadf3d48

  • SHA1

    f031e7cecc35da5c18d60e3cde7038d136c1de38

  • SHA256

    523c6658b1007a69deee06bc8a1a4ae12ccacfb5182eeb696a75a08b74993453

  • SHA512

    516286430821a495d1318f1f1a5dfa27a9269478c75548e23ac0aa37ac4c2374cb58fd8fb2e9c931ec175e5e176f5708190416b5d3fe34889eec5c0b4b8367b6

  • SSDEEP

    6144:elVV1s3zv9bds2d2tgtKZSpZrXSnMW2Rqnqb89YA:elVPspbP8Zab0MW3qY9YA

  Score

  10^/10

  amadeycollectionspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Amadey credential stealer module

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1