Extracted

Extracted

• • Target

    b1600c947e9f6b98eda0e41c89bf807ad449a0176407dab8edc6e98b47d0fdd3

  • Size

    1.0MB

  • MD5

    3951b6877c31c6de9d31da5aac42058e

  • SHA1

    e41fa06c0aefb1bf4b629fcbf1eb517bb3a204b7

  • SHA256

    b1600c947e9f6b98eda0e41c89bf807ad449a0176407dab8edc6e98b47d0fdd3

  • SHA512

    8ce5e6ea372d376245d7ad9de53cbbd8a4f926173ecaf9d81ed45bf21c2c9f6d05cfdd2f1f27729d86d57d6db83dc9c29976fa5db0fb2869d3f39a11e09d510a

  • SSDEEP

    24576:xyd6v2au+MGwons9M/EWola7ozKSvJjRE1PAGjTyRyign:k8O+Qo6MNMzKShdE1nIh

  Score

  10^/10

  amadeyredlinedisaladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1