Extracted

Extracted

• • Target

    bc9ecd5243d0cd55ec33308122babd8d3701cf2070332e2f04d5958e7781a153

  • Size

    712KB

  • MD5

    8e78334ac83265bef02664103829ab71

  • SHA1

    133e834a0437d3ae1e245c09be1f63d5c3b5f0fd

  • SHA256

    bc9ecd5243d0cd55ec33308122babd8d3701cf2070332e2f04d5958e7781a153

  • SHA512

    3cf3977611f22ce0c238288ff80c4c0d56d0be473c7c27673d15805362c71393d975f391cb2cff3d39c5fa978963b7087195ca74fc61fa7a47a4569e969a530c

  • SSDEEP

    12288:wztKepjWeeIO57LqWJSn/pLGOJHo7JUIjoKmVj7nEoqARBepX:wkNeeon/pL3cCIXI7EoxRB

  Score

  10^/10

  amadeyredlinefurgadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1