Extracted

• • Target

    8a760285af5741cbc9bdec2c1596c330cc264a34f1d61052313324d327dbe9b1

  • Size

    417KB

  • MD5

    14134ca2a5457521f0793c0220ef75c0

  • SHA1

    9fb54543cf065911683c33d32634aee605c1c8dd

  • SHA256

    8a760285af5741cbc9bdec2c1596c330cc264a34f1d61052313324d327dbe9b1

  • SHA512

    81656e69032354f35a9f41902e35b196282f73354de58debe4820e83b561ba6c2bfb128f55e2b6a9c84b7ede33f3e7ad1b75ec74247d8f9fb55a6fb78a7a81a2

  • SSDEEP

    6144:b9TyXYLim1RWbZ0V9jYvhNfvI04WWjLAin9JPnyig1rPMk:bNyIum1RWavGG0U8mPnyz1

  Score

  10^/10

  amadeycollectionspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Amadey credential stealer module

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1