Extracted

Extracted

Extracted

• • Target

    8a156fcac206420964cc1035e4dd61b659e322934522cbf326f8436df0fddc39

  • Size

    800KB

  • MD5

    026a45f724b1d914ddba159e483334dc

  • SHA1

    c3a86f951d1b9b671f3b7fef6cd517067f615564

  • SHA256

    8a156fcac206420964cc1035e4dd61b659e322934522cbf326f8436df0fddc39

  • SHA512

    6de858013c9f34c76b3ede3ce846955183ff27bc29cc082546ca8383eb6389009b10c59b0012b1d79bb0e2e3d7eeafc06b9e5def2f073c0bce78dee3f7861b90

  • SSDEEP

    24576:cyaefGZBqGOg1MG8uXy099YZX+4ERHBWVbwqCaLnfO:LamMwLuCu9qfEpIbjf

  Score

  10^/10

  amadeyredlinejokermanadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1