Extracted

Extracted

Extracted

• • Target

    b74a68700cd4061e4845803e35c2c81ea31a29aa5950d3d5ddbb71f0f6da2989

  • Size

    798KB

  • MD5

    03e909e8ebb9c7889d8ff4d4e91e0099

  • SHA1

    5c9f866b64938118d2487ba30ffc690cf580adb4

  • SHA256

    b74a68700cd4061e4845803e35c2c81ea31a29aa5950d3d5ddbb71f0f6da2989

  • SHA512

    a3c1f407a1355bca007ad4d0ac132dfee109ffc93e464b08125e0a5361296fd6f384b41e0f36543887333229d641e8a35da1765c24fa1f8ed5462015bdd43be6

  • SSDEEP

    12288:bMr0y90z4370i7Xd+hRYwBs+ebsGzPrmtNACJHrfm8JNqW0ERCEN8I2XMD1iqrt:3ym27t4hBRWPruNjree79NHHrt

  Score

  10^/10

  amadeyredlinegregamanadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1