Extracted

Extracted

Extracted

• • Target

    a8608741fd99b45add4564bf5b144bde2a43d12858b31f2f2e849feb51776ce4

  • Size

    1022KB

  • MD5

    e10edcbfee4e22e5ba919f1a2900b636

  • SHA1

    db4153268457958a7e486f7097576c09c6348d41

  • SHA256

    a8608741fd99b45add4564bf5b144bde2a43d12858b31f2f2e849feb51776ce4

  • SHA512

    7c6efe2649b673a4eb326084489d45c42e09b0ba4a109cef5b9e5596440d73eb4f0317f6ed4e0f99df649d26ea036ae09f0bf7d4b6a19000186962a15cbe1049

  • SSDEEP

    24576:yy92E97esi7IB0mgUs5/rgDWXuwMazU2n+Lf6p/:Z98soIHOJrqUuFaQ2yf6

  Score

  10^/10

  amadeyredlinedowntrapdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1