Extracted

Extracted

Extracted

• • Target

    cd3eb8c1b0922211b1e59e5b7c1d97fd83aca830736f8f92f57852cecad53a97

  • Size

    734KB

  • MD5

    aae73f3c0d5248681a16e1a31c62214c

  • SHA1

    2797bb4f5c19321fba4bde5fa3eeb5e7297d58a5

  • SHA256

    cd3eb8c1b0922211b1e59e5b7c1d97fd83aca830736f8f92f57852cecad53a97

  • SHA512

    ccc70fb941b5f1848395064265739f0220ca817934658ca79faa8529986762d712e171cc05cf3883e1fb6f05bc0273f267a27fa860e59999eec56f1aa6604b4c

  • SSDEEP

    12288:PMrly90tGeiT8i/nj2oKOnjEIzKa/zrPZTCGm547rXCKCpY+o6/JH:KyRXyobjVbzbZ/1nH+oCH

  Score

  10^/10

  amadeyredlinedanajokerdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1