Extracted

Extracted

• • Target

    50fe7da31396b7cb828637ee782386400562f6dcb51319506c38cfbade456b83

  • Size

    390KB

  • MD5

    54ab15c57d62eed1b2ef15979f697a0e

  • SHA1

    f4d27c6e4aa09fb645a869eb5d3175487610313a

  • SHA256

    50fe7da31396b7cb828637ee782386400562f6dcb51319506c38cfbade456b83

  • SHA512

    a38622e12a33bb84c50cb6527647f66fdff288695d4c263cdb77ff1b5c7cf6c88502fae57b679be477706ad94bc42021b1c670717b76f6d32562a77638091745

  • SSDEEP

    6144:Kry+bnr+wp0yN90QEOXNH1q0gGTlgGRW2NCxDS1Rtde6ACcHnlRHT6LgMFsH:BMrAy90SVlBT9NyDS1RTRcHnl9mti

  Score

  10^/10

  amadeyhealerredlineromadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1