Extracted

Extracted

• • Target

    427d7fa7985c51a913c88ac92a5df795_JC.exe

  • Size

    610KB

  • MD5

    427d7fa7985c51a913c88ac92a5df795

  • SHA1

    712e154408f7c3c55b08120b1e729b8bedd29a34

  • SHA256

    48f42120cc5b3683db52663963704e8f0a7d935a2a24e3911e83079fb4f25ff3

  • SHA512

    274e10efd14eb26091b5a59151e47e5a0223add6034fec787057ee697487db3b8c48be405c246db2d6f00674cebea0fd9bd872b5a238466cac0ac84deef836d9

  • SSDEEP

    12288:ERivuoAtJ0Ej5FH3I95Q++qz+oFDtOOafqFAwCCys6+fGvaNB7ZXy+j3jMJW:ERntJPb4fQFvSt6iPyT+fGv6Bd

  Score

  10^/10

  amadeyfabookiespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect Fabookie payload

  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2