Extracted

Extracted

• • Target

    77cdb39d612dad62e753633da8748c500e5a85bee6a9c797a07007492df53048

  • Size

    1.0MB

  • MD5

    40cfcd664366a10e726038c5d4689378

  • SHA1

    d4c0a41b00f2d825e7df255bfd4817183c84b96f

  • SHA256

    77cdb39d612dad62e753633da8748c500e5a85bee6a9c797a07007492df53048

  • SHA512

    35676d3c9161aa5c974e564c883dd8058bef93fdbe0a4d8736f8b8a824f63a54a6cecfa92200b9660d57576b51480e89ef2249164eee940078eaa64ced01970f

  • SSDEEP

    24576:fyE83KrEKjOB2rkg0+Zp2hGdKjxcKqKlWRR+/Fs:qE8uE5IVZpIt3qKlWPk

  Score

  10^/10

  amadeyredlinedisaladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1