Extracted

Extracted

Extracted

• • Target

    cebdfca3d5a3f5f314893832ef42e45ad0cbcc838bee2523d740d4dc9bcacad8

  • Size

    1.4MB

  • MD5

    aa7620ddc622cadff1ee2871df961ad5

  • SHA1

    8109b743dfed7aa7215da9bfbd99c07577943109

  • SHA256

    cebdfca3d5a3f5f314893832ef42e45ad0cbcc838bee2523d740d4dc9bcacad8

  • SHA512

    13987987f414aff59892944c336efea0cee57cf0e789b6b74519f9ce2756024c3de5dfb2c782da7336b398c6b46a58a7d7913c2cbcd37895948fa682a9641a6f

  • SSDEEP

    24576:UytVtQ5smhn9iK1dRdYThez/Y2UHx5dPdPfG0+uULirdqIGA5tvrpEERuqZd:ju5smLPZdohFXfPf3UOhq5u1Fzu

  Score

  10^/10

  amadeyredlineladamaridiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1