Extracted

Extracted

• • Target

    2f2bd9a74c9a4f09dd8a908de87d91f711d3b4873ce5cae4642dff7db3b000ba

  • Size

    556KB

  • MD5

    399a40bec0bae4f960201473a066008f

  • SHA1

    6a4b62acd10078d9fbd85c659452109d527a5f63

  • SHA256

    2f2bd9a74c9a4f09dd8a908de87d91f711d3b4873ce5cae4642dff7db3b000ba

  • SHA512

    a42cb16ec40774a79d3404d7c2a5c778361cac741d3cbb9ad998c83290cd30e35f6b3e0063e3ed2d72f33dd5aaeb5117fb4494659172d99efdf2b262fce6ac83

  • SSDEEP

    12288:fMr3y90LubIZtNarKps07sD1SYSe/S8vNw/xqY:IyHU0OhwTG8w/z

  Score

  10^/10

  amadeyhealerredlinesavindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1