Extracted

Extracted

• • Target
    file.exe
  • Size 374KB
  • SHA256 afabd219f0d644da4f9542932cbb5afcbcb0c66a2302c2353bb89447104cbb93
  • MD5 1284189a11bd4f537fee0890dc21b33b
  • SHA1 fc870cbaaba025161019f37f8ab2a3e6806cb2f8
  • SHA512 19daa87707f8f5ef9d7c7febaaab3c4ac21f56de3ebef4e2ed009aadab75bffd21ecee6a1b9d4e1a8efa514532e5093356b9a80f8b0b70e3cc1d331843e52b5c
  • SSDEEP 6144:azLVkcsROtOeLDLq9Oc0RaSyiiP1cSFYc5EZIjjgi:spkcsgfLoODa2Ri
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  amadeystealc9c9aa5savecredential_accessdiscoverypersistencespywarestealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2