Extracted

Extracted

• • Target

    5911df5268fa5f853dbe7e272d673ebdd24d37359191f8c2e49da523337629e9.exe

  • Size

    5.5MB

  • MD5

    cb85b05afe9130e35937697c56d1fd4a

  • SHA1

    7ea967e29ea21ac034ca3feedaaf3ed7937156a4

  • SHA256

    5911df5268fa5f853dbe7e272d673ebdd24d37359191f8c2e49da523337629e9

  • SHA512

    300e3db569eb0dc56f8f8a9fb07dc9c7df727984c669dc41af6a243d92b7b3517e254cf6b8e2c141d700910e73f1a30b6b73503e1c57f915f492802a313be68c

  • SSDEEP

    98304:BJsdjJqCh/sR/+jG2TNjE5jvJgB5NpZUVYEgSO1ib0y0HxaT5e4xBo5pUXdALaQb:sdjJqY/sRcTNjyxq5QYFRtHxaIYacXdU

  Score

  10^/10

  amadeyspywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2