Extracted

Extracted

Extracted

• • Target

    63251d54f9e11c673539780b285b4155f75c40771d3c120fe8bf9377ad1bfb6d

  • Size

    1021KB

  • MD5

    40108da7b919385d3fbefc9a59944b78

  • SHA1

    b4c7e2c38a2e682dde4c9bcb83baa5bea1974191

  • SHA256

    63251d54f9e11c673539780b285b4155f75c40771d3c120fe8bf9377ad1bfb6d

  • SHA512

    1295215c1e8b71c80f423371fd8532e906f648fcf54c2132143d2c92ddf758d8786c7996a78a415e280c598943306be9ed132e9eadd16dd685e1fe66ff69f1e5

  • SSDEEP

    24576:Myed4qZWPU7GLTO89m91eK3kMPQgSkhynmF1nQERyfOY5:7ed4qZSm8LFKzPrSznmFrAO

  Score

  10^/10

  amadeyredlinegongsonydiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1