Extracted

Extracted

• • Target

    8c68e0939ef1baf1f980c3d93060d7b059ddbf9091421a189043a52f08d606a7

  • Size

    556KB

  • MD5

    e383d58aba10ef8b1461d2126bb0afd6

  • SHA1

    c949289bc3af2bde441a25febf9abe60b2ac0043

  • SHA256

    8c68e0939ef1baf1f980c3d93060d7b059ddbf9091421a189043a52f08d606a7

  • SHA512

    1b57cc836da8a8349bde0df765556b3e7d81b9f8a2000e11ae898ad9c01ed1c835d98f43a0744cacab5be9fd62b21cd7456478e16ea7f1bc78192cc195f2fe19

  • SSDEEP

    12288:9MrSy90dtGYltaVbdjmJo8wS7SB/qR3of4FWfJ:/ywZujObVUYSJ

  Score

  10^/10

  amadeyhealerredlinemickydropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2