Extracted

Extracted

• • Target

    JC_6936a56efd4d51f236841a94f58686ad099773e0adbef02561cda498347181f4

  • Size

    728KB

  • MD5

    5fe739d874ed8bfb3ff23ed8531bf28a

  • SHA1

    06cd37f1159bd367a9f53a53e2b4456104d0f9f9

  • SHA256

    6936a56efd4d51f236841a94f58686ad099773e0adbef02561cda498347181f4

  • SHA512

    445aa02187c9e14584c948db3bcef2b9dc68cde3a10f7b2df4dc92dbbf071040aac9a78254bca2c537015a7529ecae44c38f625228174330a0b5f220b8a20fb9

  • SSDEEP

    12288:Jh01jRiaQEcxlBlLYWmwKAVW+0IF13URl5mzLAHKOx0A3KOU1EqpFE:Jq1th81BhFVVhvcl/AA6J1EC

  Score

  10^/10

  amadeyfabookiespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Fabookie payload

  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2