Extracted

Extracted

• • Target

    0eeb8126d68a5df250e2083d8909a43be6651f5a4450fa46b191477cd0bd4a8c

  • Size

    450KB

  • MD5

    bcad11f6ab8d5a389e9ca1a189ab6840

  • SHA1

    3be4bcbff8fcc6e5631434807bbb3eeb9ffa9814

  • SHA256

    0eeb8126d68a5df250e2083d8909a43be6651f5a4450fa46b191477cd0bd4a8c

  • SHA512

    9cc12b9343a4744d1cd3a712e20cdcf9c8bb9d116a989d0962b2ca209370b56a9a880ad9513763f1d5298c15fd25b15eec6b987d0755483eea818091c15652f6

  • SSDEEP

    6144:FpqCfjcHwMbLU3dw4QHVa8GcVCZMh9jbMxCC7Nx9ipAEzmq4JerYh0K:FkAkBbQ3EHkpZ+9jbMMC7diiEZ4ArGP

  Score

  10^/10

  amadeyredlinewelldiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1