Extracted

Extracted

Extracted

• • Target

    62eefe1feb692f99dac3cf6b72aed1021b7f3ecb398fa2dc2160dcd744bbe07e

  • Size

    1021KB

  • MD5

    9df620f87e0f15321ad1b7bb029fdd5b

  • SHA1

    464e6d58336d5de1a55c9f043eaca95db0f48e32

  • SHA256

    62eefe1feb692f99dac3cf6b72aed1021b7f3ecb398fa2dc2160dcd744bbe07e

  • SHA512

    32a3cb1f5006380d13c59fcda8a6ee475e00a3fe2406d607c9bbdbb20e0d027f3e19bd1fdfec4ea83eeb2a9faf6488fa8bc4719c4c100d5ad23e3afd2285eb88

  • SSDEEP

    24576:5yrtxPnMakyal2RGpkNT1NbFWz6eCImgUc/7Zl:sHPlGpQ3bM6eCImk

  Score

  10^/10

  amadeyredlinedownmaxidiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1