Extracted

Extracted

Extracted

• • Target

    5cccc9292a17df6efdf282da545e9fb5e24d1f1be92c402be6618b2f4b34591a

  • Size

    1022KB

  • MD5

    f1d836b1f8b72545ecc1f5552bc905c0

  • SHA1

    98ed7d4ca75dae65a9a32b6d80f662ab26db7c07

  • SHA256

    5cccc9292a17df6efdf282da545e9fb5e24d1f1be92c402be6618b2f4b34591a

  • SHA512

    5a490f0e2822e3755ed1430ba6d75e0a49a7ca81e0ecf05bea82179aebc9e45f32914cf97ed8557a64a06f1b66c2db37761822cdddc5a943b8dcd1d2b6dc867a

  • SSDEEP

    24576:CyGZjCs4RAgcLjr8vVTl47j2glPxgJDa6bdi6n2Uo6YTQMl1U:pYjCs4Gg2jr8NTepqta6Ji5FQM

  Score

  10^/10

  amadeyredlinedowntrapdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1