Extracted

Extracted

• • Target

    cb57bb2f81808d3ed88c4e4431be01cb51730c953893a690720cf2804b8ef456

  • Size

    556KB

  • MD5

    20a14bc6359032218d848f54c2a5b90a

  • SHA1

    f3df9f99a844a42201be62c063adfa21fa3d6f8f

  • SHA256

    cb57bb2f81808d3ed88c4e4431be01cb51730c953893a690720cf2804b8ef456

  • SHA512

    55b9ab4fe628bc8ab9e98179d739c513688e45c1d78c411141240f2dd08414a5ffc08aa2fc64166b2434f063543aa9a23c7416e10d18946801f038c18f852b27

  • SSDEEP

    12288:fMrSy90yvgLA2WMA2ZukkTh1DrpFtFIgBYCqwuwm4zy50kSBj7:tyTvgM2WMt0FtFPzQszm0B17

  Score

  10^/10

  amadeyhealerredlinemickydropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1