Extracted

Extracted

Extracted

• • Target

    Requirements.scr

  • Size

    45.2MB

  • MD5

    3984a66e5b78113a55d22f9c2f3af1bc

  • SHA1

    16895f9541767e859eb7784b70804623eaa48b2c

  • SHA256

    72404ecb9dff0bbdb1296b7be79515ebf9323101374385476c282812517c43d9

  • SHA512

    b44cc041f9df8eaf28fee92a701dfc9d45b458b3310a248d1ca466c313bb26466ea098f15bee119999c4e8f08c8bc63f50e783da98b72863180440fd4373547c

  • SSDEEP

    786432:+1prb/zUF2kVcAQDv8vK6BneoexUqOLb55j0JJ3gTsGN3pxNy:ypLUAk+NqBsxUqcpxsMXc

  Score

  10^/10

  amadeylummarhadamanthys76a1c5discoveryexecutionstealertrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2