Extracted

Extracted

• • Target

    1e8fb87dcb50d543d474e7f7ffe7c218.exe

  • Size

    556KB

  • MD5

    1e8fb87dcb50d543d474e7f7ffe7c218

  • SHA1

    bece8f07965b571dc653507d930ca2535f67200d

  • SHA256

    bae61ff854b1c75af1816058f9e5393fbfb655879e2c2c9ff502aff248214375

  • SHA512

    c00988c190cbe049713521728651b9f7b44550cd2afb70cf43e2d1e9ecabdfd648ee85fb5cbd8899a6b0ab45afa0a59b73fc2879253e772b91cc0d55cd45826a

  • SSDEEP

    12288:RMrMy90athOwi032bagoa57xS/FPaTQMPii7+3c:Zyvh2baGfQMP+3c

  Score

  10^/10

  amadeyhealerredlinemickydropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2