Extracted

Extracted

• • Target

    7a1cbf25d87e34a07af5cb392d384b35db037477c13229e796fc731c78e7671b

  • Size

    555KB

  • MD5

    74356ff2683f30c8e78363b006d26d8f

  • SHA1

    666cdfbb955e6d2d322a45220654c716fea50561

  • SHA256

    7a1cbf25d87e34a07af5cb392d384b35db037477c13229e796fc731c78e7671b

  • SHA512

    d909c782671e8fa6f2fc956355daf03f077fe77f588752263e3daf500d7d5d80664caaa5d7d3cbab70849731333ed12ccfdc46545629b39a2336b431e38399fa

  • SSDEEP

    12288:nMrny909awuiRy8gnnG+3HnqAa904tgBYCDz5d82IT+jUff:AyAaqgnnnHq/mzn5mcUH

  Score

  10^/10

  amadeyhealerredlinesavindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1