Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine Payload

SmokeLoader

Modular backdoor trojan in use since 2014.

suricata: ET MALWARE Amadey CnC Check-In

suricata: ET MALWARE Amadey CnC Check-In

suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

NirSoft WebBrowserPassView

Password recovery tool for various web browsers

Nirsoft

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

Executes dropped EXE