Extracted

Extracted

• • Target

    79e8a7a25b76eac5e7cbc7415506ac4c579d2879863fcbfd82d576797ba502d5

  • Size

    658KB

  • MD5

    0928e8ecb988d216a4d40d1e6852a1d2

  • SHA1

    f0e4635f21e4e657ba62697e854eafc895abcc09

  • SHA256

    79e8a7a25b76eac5e7cbc7415506ac4c579d2879863fcbfd82d576797ba502d5

  • SHA512

    7313a0baf8811842a340f9716734fcb1db4c465fe392033c65068fd048272afa3faf7028f6e257bf13755bcb8af1f54e8c73f39d0d99ee0de1d0f334676bf802

  • SSDEEP

    12288:ATuWIZjxGBBATAtXG+QefG0nGmp0KeHtAhaQnyvfJr:A7et/AGbJY0KeHtAhaA2r

  Score

  10^/10

  amadeyredlinedezikdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1