Extracted

Extracted

• • Target

    8c410a147798d5f12237b593d50cd63b.exe

  • Size

    560KB

  • MD5

    8c410a147798d5f12237b593d50cd63b

  • SHA1

    e69b16d1d1799908e9d8c34c48c8e9ab1dedd98d

  • SHA256

    c3e7acaec9f0c86e50fa5f6d688b4df4c71a972aa5bababbbd2812f3473460aa

  • SHA512

    c78c393ec645b1148c53bf03176f2ee2b30cd95f9cbbb7a4bb6400273663d4ca94e30a7fa32d42a09ff41ba369657d0228ab0926dab804ecc560a7b867fb0f14

  • SSDEEP

    12288:cMrsy90BYxeIkHizKJDh0Qi7sNiUTXqAq6RM:AyquevHIKJDFi4NvTRG

  Score

  10^/10

  amadeyhealerredlinemaxikdropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2