Extracted

Extracted

• • Target

    bb0dc08b807327e5f914a0a3dad75b25c65db028ffe2ef5ff96bb55c9a7eafdf

  • Size

    944KB

  • MD5

    412b9655177f05168aa3ca99da7a78f3

  • SHA1

    d4533b7e0cdb5efea7666a6eb883aa3dd478d60e

  • SHA256

    bb0dc08b807327e5f914a0a3dad75b25c65db028ffe2ef5ff96bb55c9a7eafdf

  • SHA512

    0e581e66b1007252d696864da806308758aab3c6eeffae2b8792ec61de2033b2b796957d4500de127af2b60861d3288abe83ea44150e332d8530a8ec7cb2f43c

  • SSDEEP

    24576:Ny8cP8RNGC+l85CGpN1b533VTGz+N4s35bvo:o8EUNusz1bFJGze7Jbv

  Score

  10^/10

  amadeyredlinedisaladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1