Extracted

Extracted

• • Target

    cafdd014dc2e10754016e81c804491796cfc9a9b9d90cfb5649db92a533b0e07

  • Size

    489KB

  • MD5

    292b496486ff80af39ed53c020810d23

  • SHA1

    80e1056e0c53b0b33ca1b9ae38da21db0b4f7218

  • SHA256

    cafdd014dc2e10754016e81c804491796cfc9a9b9d90cfb5649db92a533b0e07

  • SHA512

    c1f9f956fff133e74286933242587968d09e75246cf37a8f8d43cb5018b6f8b6507deac4c956183f9883573d0689f8a217e5992d3a14c3e0a167d795d55e6823

  • SSDEEP

    12288:qMr7y90KUzlLyCrTOQ/+S6v1Ut9u5ZGCZuuAU1LTsYoz8y:FyJIhHGP9UDubRooZTsYoz3

  Score

  10^/10

  amadeyredlinelampdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1