Extracted

Extracted

• • Target

    ffd2cf101a540bc16174a0a808fde3eb211b8939a21c0da51d9bf0b75e4bc439

  • Size

    560KB

  • MD5

    652993675b551d3ba2956b376df3129d

  • SHA1

    391c5ba8c731d707ab923742662b0f3693305ede

  • SHA256

    ffd2cf101a540bc16174a0a808fde3eb211b8939a21c0da51d9bf0b75e4bc439

  • SHA512

    253c415f96b2af7bd7f8e2c761495671d65a39cf297eb91bf12f64c404e23047ec0a14ceb63a32d02f681941afa581623acd361aef98f2cd58fc0582f4fdb374

  • SSDEEP

    12288:rMr3y90JRhkDvxyaGQ3Jnbr8FUzdYNirWXh9oBZ0Q:MysgytQZbr8CuNOW20Q

  Score

  10^/10

  amadeyhealerredlinemaxikdropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1