Extracted

Extracted

Extracted

• • Target

    73cee4a347d8876ff8d0447d33f8b7c4ae442da2661e85215c7e430bed9ddc0a

  • Size

    577KB

  • MD5

    9f6a9d4b99a7da968c6f7b118b08c0b7

  • SHA1

    600ac74b54f2b6611ec806f442d7dd9faef3f747

  • SHA256

    73cee4a347d8876ff8d0447d33f8b7c4ae442da2661e85215c7e430bed9ddc0a

  • SHA512

    e5e5e3098f713b09944910ac315476120a0eae4e7aa0fb866ff38c7f2a66e7fbf7f16d487113c8aa8804603a4d6c280abbdcb30b2d58003ca26aea040a63129b

  • SSDEEP

    12288:bMrUy90doKMNzXA0yDnhVi8YNrTX/0PPOO93oc4bmIqZ:XyQm6n8PX/0x31sqZ

  Score

  10^/10

  amadeyredlinedanajokerdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1