Extracted

Extracted

• • Target

    fabbba0f52565e13f11156fd5a0f761eeb0b797fc6389b9e323b41705e8d705b

  • Size

    1.0MB

  • MD5

    9310034b57024a6909623cffa9190c8a

  • SHA1

    2659fa40af40049d181aa45bfb2f615e47b2cbdd

  • SHA256

    fabbba0f52565e13f11156fd5a0f761eeb0b797fc6389b9e323b41705e8d705b

  • SHA512

    e805cbe4e32fb0c971de0b33415f3d8063f4e440a831e80c063400b5e520e93c48d1886bfa7281d9e8d8c00abdf14988e45c104a365ff3c6a00677eb023abc0b

  • SSDEEP

    24576:ByoY0swJSB6z9WH51SKRaaI1SWWLof9Bj/dm8r3K1E4MihhBknlkoAEqs:0jJSSBG901SK4aqc6Jo8m1EIrnEq

  Score

  10^/10

  amadeyredlinediroladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1