Extracted

Extracted

• • Target

    141567ba6c7793ac8e6fc7acbae7b6a1f23fbd1f1fa65d2caecf7e3e48423012

  • Size

    1.2MB

  • MD5

    0857d0224d5da928bb7bf3b0956882eb

  • SHA1

    3fafd97cfd9e667220f81a500737495974d77f39

  • SHA256

    141567ba6c7793ac8e6fc7acbae7b6a1f23fbd1f1fa65d2caecf7e3e48423012

  • SHA512

    1db10630027db974014c06c7ff956c52a7e24a743b77e7e510fef28fe8577449234370946a5dd00a0d1a2d5ee82167f4245dca8a269b5a7b597273fddf2c689b

  • SSDEEP

    24576:myX03EjT5mbXgmLO0gEQSMTq6G3ax5wGut/zM+Suc9oU1i:1X0ETo/L7rXcPx5tYY5uc9oe

  Score

  10^/10

  amadeyredlinedizaladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1