Extracted

Extracted

• • Target

    d967b0ea08307693a92fc9dcd0a36ae84237358ab46a953ad3343b46d988ddfe

  • Size

    1.0MB

  • MD5

    a848ad62fa6f2c2687b359aa4dcc8580

  • SHA1

    fa20236bfb90db6fc9b96814d25d7a184655d62d

  • SHA256

    d967b0ea08307693a92fc9dcd0a36ae84237358ab46a953ad3343b46d988ddfe

  • SHA512

    780f9b373f02614327c1c1733be71edeb1e966e2eb7c84e7eff275cf09bdecebe3f18c2ef5b8dd6a55a1621800b0aa51313bd07334032b8f853a65515396632c

  • SSDEEP

    24576:4yYS9EBlGOPabWVCQnLcTZorsc8dirOw5odVSy7e37ORYTsDK:/j9EBlYWVclors8y7e37ORw

  Score

  10^/10

  amadeyredlinedisaladadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1