Extracted

Extracted

• • Target

    309b37d97ef2ef903b5b3871621ac1960c30f257424ba79281ad40699a24559b

  • Size

    713KB

  • MD5

    fc4927625a12ea6b6f232146cf96805e

  • SHA1

    f291f5ae0c171ca4761baf83e7f4d330e08c04b1

  • SHA256

    309b37d97ef2ef903b5b3871621ac1960c30f257424ba79281ad40699a24559b

  • SHA512

    6e455d724901b8e747dc049691ef687f493746e3e7f4478328c8de9adc90818c526a0895d28230657cbb5346b1e5cc5a7eb998bdb61d29977dda7608d24c45b4

  • SSDEEP

    12288:rztKeujWeeIOwDhqWJSn/cwnlGO6G5Q/V0gVq15a7419IpWCap5NdQ0:rk8eeNn/cKGO6GGqgV45k4tX5L

  Score

  10^/10

  amadeyredlinefurgadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1