Extracted

Extracted

Extracted

• • Target

    4f294cf1f2e4381315b4fa75fe4d8e078d29b246c8ea6fda26f465c003d03870

  • Size

    735KB

  • MD5

    b91e23c62d93ba5ea0a66d8fc321893d

  • SHA1

    fd91ae8b7052bad4d335f9e8b1c5d44bab7e7819

  • SHA256

    4f294cf1f2e4381315b4fa75fe4d8e078d29b246c8ea6fda26f465c003d03870

  • SHA512

    8b98b80227bc0da93ae27a0224f2c8aec52a6934ca4df4d2232f21be78760773a7d4c29a60f0149552584a36276e9d0d0ff67e6911ddac43660abc48b68d85d9

  • SSDEEP

    12288:CMrfy90gwT9jU40XccDTXYW4XWyQGrA2FKVNck9DZkJpf2ylYCaaf:9yHwTlU40RgWfGr7fSiJpV7f

  Score

  10^/10

  amadeyredlinededogregadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1