Extracted

Extracted

• • Target

    96e5dab2146f8633d79cae20ae689f7f248ff1bb99de96947a35906ba9cfcda3

  • Size

    560KB

  • MD5

    1b74c9c71f33b49cce129feb04cd3309

  • SHA1

    42b5e0b430c7e03fbb47e75a7c96b881d83ea2e0

  • SHA256

    96e5dab2146f8633d79cae20ae689f7f248ff1bb99de96947a35906ba9cfcda3

  • SHA512

    decb1c330827530151804390d7e7ef95a838858fa233c1c205edad762cc14f3e746dd80b92ec3c52d65794ea7ddec3655b1948481cfd1ed08db695fea187838d

  • SSDEEP

    12288:aMrsy90HKYe+oAdb884tj5ty3pP3Ni4tBTvg/M:ayoK0o8ojSZvNvnvgE

  Score

  10^/10

  amadeyhealerredlinemickydropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1