Extracted

Extracted

Extracted

• • Target

    b45e88e661f51ff22892c193586d9092c0c6bafc6622e2f9b2e7545130df0d9c

  • Size

    1.0MB

  • MD5

    6dacc1587101cc41624b7c8a55a0d0f4

  • SHA1

    aeeb26e35c2fcc64808e1d1c4dc38acad56c83e2

  • SHA256

    b45e88e661f51ff22892c193586d9092c0c6bafc6622e2f9b2e7545130df0d9c

  • SHA512

    de5808f6edbddc3f0396e1fc398f7b623765cbddeaa67fd5026854505f0df795dea0a599c948450608b69b4e623d06cb59d7a5a5e8684471c5c0417b7eaf04aa

  • SSDEEP

    24576:7usZZe3gfRLVp2b8vnI0zGHHRBx6i7O7evx:7us+3gfRJUcnwH0i7aM

  Score

  10^/10

  amadeyredlinemangovinadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1