Extracted

Extracted

• • Target

    cb15ac195e00a0cfa2cb6a2632c1ede95659565dfeacb6a712bdc1a9a6edeba1

  • Size

    559KB

  • MD5

    a9dbca8ad8d3de029a2e7d81a4a86da5

  • SHA1

    1e5b90574a4591bf1d05b69e0a7ddff759d21fa2

  • SHA256

    cb15ac195e00a0cfa2cb6a2632c1ede95659565dfeacb6a712bdc1a9a6edeba1

  • SHA512

    af68dc4c6ed576a797930dfe6d0eea9d462e03f83ace62e21fe185a1f96f21b60811f99980b3896c9bd3f4abb4503976fed078d4ba8a337471f85dfd18403f0f

  • SSDEEP

    12288:4Mr6y90p41w+X9rt9ofYHh5uP6sbbC7tXTb7PT0eSeW1zr:yyU41R0gcRb+7dTH70eSV3

  Score

  10^/10

  amadeyhealerredlinemaxikdropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1