Extracted

Extracted

• • Target

    JC_e8911bb8e59c1b64ec8c6867ee2be66ed5b39c584ce80ffbbdf8640ccbcae65b

  • Size

    501KB

  • MD5

    12552a34cd4b93a238715143ce939456

  • SHA1

    3e2e1ee5df49d85a3eaa11902033d8ed82d7a6d7

  • SHA256

    e8911bb8e59c1b64ec8c6867ee2be66ed5b39c584ce80ffbbdf8640ccbcae65b

  • SHA512

    4e0a05a223a52ecda69f44027fabe5b8e568d155c0064e4b93229df1d6916de3fb9b24003d07b609e3154860c1a635378ef243ae9c9ef1e876b988d79844f64b

  • SSDEEP

    12288:uMGGVrh8GjaqQhqEELp/TUFi93KLlZ/VH:uMGGVrh8GjabhqEELp/oFi94Zt

  Score

  10^/10

  amadeyfabookiespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Fabookie payload

  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2