Extracted

Extracted

• • Target

    e2e9b1383dbf2f8023031d87bbedf873b0247bfbabeb76cb8609c048a4349a4a

  • Size

    560KB

  • MD5

    3c0a0f89082953f2896ef98472ac0171

  • SHA1

    4c66f1cc50b248280daf789f0e8068fc866a5371

  • SHA256

    e2e9b1383dbf2f8023031d87bbedf873b0247bfbabeb76cb8609c048a4349a4a

  • SHA512

    1ab28f4961ed6c54a0951aacf97c3422922937d71caa77fe5a1d315f57f244a2671b484d3a8da91e143f1023a37862831d7a2436ea2d2af790f9c4ebef320c38

  • SSDEEP

    12288:yMrCy90sDeq3qA++kcbiNim29cT9iQBIW34Pi:sylDjaVNxNg929Hj

  Score

  10^/10

  amadeyhealerredlinesavindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1