Extracted

Extracted

• • Target

    a5847c1b6fb8aff317297a7ba6ee07228de3022304f0f3cc74585ebc77d144d8

  • Size

    555KB

  • MD5

    a0883bf3dabdce81ce3abbc03b987448

  • SHA1

    298b07936d57a20d57c593f8501700f7b094f73b

  • SHA256

    a5847c1b6fb8aff317297a7ba6ee07228de3022304f0f3cc74585ebc77d144d8

  • SHA512

    69bbbd0445e96c1f9c4824cdefaff1890c6abe902f90ee30ab5899240f87d8e51a439874e24b6dc6ebdfb84442b048c6c874d6bec0598ffa17f96fd85a7a6c5a

  • SSDEEP

    12288:GMrey9026D6dDtAAVYhK3ZqzTogBYCdPDmxOd0Ps+cmksfdsp:Uy66dDPx383z9D6KIs+ibp

  Score

  10^/10

  amadeyhealerredlinesavindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1