Extracted

Extracted

Extracted

• • Target

    3c6b992e7977f4a69a6ce68e75e172a172d5bdf3804c2e19778122ad04726926

  • Size

    735KB

  • MD5

    d459d97cb437a62ea58abe4b31603a8d

  • SHA1

    9434eacc7335676f3a55d7ff56e2d3d715634c2b

  • SHA256

    3c6b992e7977f4a69a6ce68e75e172a172d5bdf3804c2e19778122ad04726926

  • SHA512

    91c915a425a8183295bf87146686da4e3a35cbe0420bf1012e146b89e2cf28492b1c9b5c29968d7b39134ebcbfcd91fed5f0e5a0207b6b1b80932ea277cf1f9f

  • SSDEEP

    12288:7MrOy90Wl596DDDS4kEw1agXSyJ9sxHgqKN9/hQjORkmth/zI2PS2JZT+ao2:pyj9GyaXgXS69cTjGkmth7I2PPJZT1

  Score

  10^/10

  amadeyredlinedanagregadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1