Extracted

Extracted

• • Target

    7c2d7b3b206dd4564b8378daf4c005da673056b098b9dda9b2e0c03da04d75a9

  • Size

    390KB

  • MD5

    7b5ad2f47c2c1cf37f39e225b944f948

  • SHA1

    c046e9595886a6b3f858402a4b6eebaff79102a7

  • SHA256

    7c2d7b3b206dd4564b8378daf4c005da673056b098b9dda9b2e0c03da04d75a9

  • SHA512

    5ebee4e1280c69e478538752c42466aa6cba9941ef1431c03df36c332641440a71b9660a446813d1b22e89fbacc2b72dd1f3610437a881895a3e9e7f2d65cf61

  • SSDEEP

    6144:K1y+bnr+kp0yN90QEItQ4FWByynRq2oK1cDQ/klR0mRFIh7+:HMrAy90mtYTkG1c020CA+

  Score

  10^/10

  amadeyhealerredlinenasadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1