Extracted

• • Target

    60c0ab0cdcb4e608b2b400d19ad7e6b0705a85628bdf9b8ca42efe16cb07ccbc

  • Size

    1.3MB

  • MD5

    28995fd2b7e5c574cd5c910d2f1fa923

  • SHA1

    38d8be92979b5a6cbb7a45df58cc1d41ce5f7a9a

  • SHA256

    60c0ab0cdcb4e608b2b400d19ad7e6b0705a85628bdf9b8ca42efe16cb07ccbc

  • SHA512

    ad33ea0538c85b21123a71bfb79fab22ba96e45d1f95da0d38b69eeee96d0fc91da620b5a30c771f66600593ccc57293a2073a4888930b9aa8de7bc735da7325

  • SSDEEP

    24576:CIf0vEXsfmUSIPhLNdG0LwXtvhJmyNDnG:xfWtdPzdG0UU

  Score

  10^/10

  purelogszgratratstealeramadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detect PureLogs payload

  • Detect ZGRat V1

  • PureLogs

    PureLogs is an infostealer written in C#.

    stealerpurelogs

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2