Extracted

Extracted

• • Target

    417409c15e76ad743faf8012d4f1a2554dc025448cdc4bd5d84bcb3606e1f237

  • Size

    390KB

  • MD5

    79f08ed53361f2ce73b884fd1e56abc4

  • SHA1

    a7a2ce3d249c41b3c1944fd4cda063414c45b967

  • SHA256

    417409c15e76ad743faf8012d4f1a2554dc025448cdc4bd5d84bcb3606e1f237

  • SHA512

    62890a0b1ae076bdbb4889591a3341f1480f2807d580b2e215cf453fc219dc01821f8849c0b59942f112fbaeef84f6cc7cd2f4ca70a57ff3dd25cfcf89411e49

  • SSDEEP

    6144:Kcy+bnr+Yp0yN90QEEEzvwf9oZPKfTif22WR9hqPpWupfX8q+HIfyfE5j:gMrEy90fvweZPqie2W/+1vPDl

  Score

  10^/10

  amadeyhealerredlinenasadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1