Extracted

Extracted

• • Target

    0d1734e3dd0260086ee8fa436d1dbfd1e966f784d1c5ebe0aef1448b6810f73a

  • Size

    390KB

  • MD5

    d75b93953779425c04e483bdfbfaabbd

  • SHA1

    e3d92580e69f373f38a56fd7ac5da88c16214087

  • SHA256

    0d1734e3dd0260086ee8fa436d1dbfd1e966f784d1c5ebe0aef1448b6810f73a

  • SHA512

    b19a49879a184b286f15858567139ae17c8555f8b68742e622b929cc369e2827a7da4067634b980dd7054c090e4e06d3b176a50817a05c95bf57cdd58e21a066

  • SSDEEP

    6144:Koy+bnr+Np0yN90QENF+9h0kWN7ZNuMoPAkGjZpebfLCcHnlRHivD632Jv:IMrBy90N+pQjZpOOcHnl9On

  Score

  10^/10

  amadeyhealerredlinenewsdropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1