Extracted

Extracted

• • Target

    2bb9bb2b762084df1b1aa215ad24a7960d011f0ac1e35c1643e4b1b8befe7849

  • Size

    517KB

  • MD5

    d65a1440aa4aeac8931623eabc5211c7

  • SHA1

    492d2f2f9b5543e7e8d0e924d12a650ae378dfe4

  • SHA256

    2bb9bb2b762084df1b1aa215ad24a7960d011f0ac1e35c1643e4b1b8befe7849

  • SHA512

    cf1f79b9dd475cd2f0f5af3c8a0d00105aa3c0cc6b875622c6c065a1403a04e77c3bb64744aa0d11a6fefab282130c64b83166806f160eb8abb6a65539b51c59

  • SSDEEP

    12288:hMrDy90QTd09O+Sb23FHJCgTp8bHnnKJnyE8gBYCNUJ600NE9:2yTTdOSbS4mp8TK9yEjzH00E9

  Score

  10^/10

  amadeyhealerredlinemaxikdropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1