Extracted

Extracted

• • Target

    5c34690d5a264c8f9a1a84ba6773e1dd007d0120983debb717009bc6e4507e40

  • Size

    1.2MB

  • MD5

    39dd3acb3ca5279e644531b190af01fb

  • SHA1

    c7a8daff8398aa4ac94d070d611454fe0fcf8ba9

  • SHA256

    5c34690d5a264c8f9a1a84ba6773e1dd007d0120983debb717009bc6e4507e40

  • SHA512

    2389a905923e301e573c53739624101ec30697be212efaaaa6586ae2be2ea890deaceb42972c9365242a7ff4be992dfc717cec6e86fbd2fc166e20db11f47b99

  • SSDEEP

    24576:KyBsKtRYKKpPr/3ePdVr+2LGCc5rUFHB4KqMPMFtvr2AV:RBDlKpj8d5G7SYN7Fp2

  Score

  10^/10

  amadeyredlinedisaladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1