Extracted

Extracted

Extracted

• • Target

    f36d5e644b66ea650bc7ff0e39776efde1d5bb3a861e5c77229f827601c24597

  • Size

    721KB

  • MD5

    b69eac52fd63953d74bba3984a7e8fde

  • SHA1

    01653852b796d6335ae51e0ca606fb8ca13aecb4

  • SHA256

    f36d5e644b66ea650bc7ff0e39776efde1d5bb3a861e5c77229f827601c24597

  • SHA512

    f8151983fdfaa9c3ba5cf93d62b0108de5e5086f1a394cd3393892f6d67d14a4b4d0fc308a291dc59243322c9cd5d3d63258f4ff7ba209eb825c0c4adbbe13c4

  • SSDEEP

    12288:7MrPy908wcnnhTr38OZYIPyI1iu6PcaVhA2IY3dnWfR5x691cUH/buw:0yMcnpzOIatvVhA2DnYRK91RZ

  Score

  10^/10

  amadeyredlinedanajokerdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1