Extracted

Extracted

• • Target

    db75314bc526312ea770aac0ef747cdfa3a57fc3523520b4956b2b949a090ee3

  • Size

    689KB

  • MD5

    f19fb30d05f8a986917202c8fdf49971

  • SHA1

    7fd7c41f62691bda80789999dc1ae1e1fa4122ee

  • SHA256

    db75314bc526312ea770aac0ef747cdfa3a57fc3523520b4956b2b949a090ee3

  • SHA512

    6b3ad9db04dc00a33ef15eac916604b3d7da01424c13b68dd2c296eea3cd8660bc668981c2e1d3d254cd5792fe7eb54f5e716e03d4273b454a6a8de912e8862d

  • SSDEEP

    12288:zMr3y90R8RY7TkxiVKWUHsgv81kJq0dH83EkezR1vGWpS/rl:oy8zAxcKJHso81kA0dHIEZR1X+rl

  Score

  10^/10

  amadeyredlinefabiodiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1