Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Detects LgoogLoader payload

Laplas Clipper

Laplas is a crypto wallet stealer with two variants written in Golang and C#.

LgoogLoader

A downloader capable of dropping and executing other malware families.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

UAC bypass

Downloads MZ/PE file

Executes dropped EXE

Sets service image path in registry

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.