Extracted

Extracted

• • Target

    357eae1529b9dcd290766df1e3d0163c13d90a40e26d9b6bc88c000b67972e4b

  • Size

    556KB

  • MD5

    127b1e778480a9cd81c6b9402280a32b

  • SHA1

    bf19a00e2beda10a39f584d995dfb688d72352e7

  • SHA256

    357eae1529b9dcd290766df1e3d0163c13d90a40e26d9b6bc88c000b67972e4b

  • SHA512

    b85f570f014ad0c73d291f2e969cae31820d4227a2620cc4d1542482405952e88169a5269a1cb9668a3c2fd329dbe2817a7b25e1fef69ba673d5e248ac8c14e0

  • SSDEEP

    12288:/MrKy90a424HiI7N5jUBP1HBwHTltsTgBYCgCskQPIj8rzPwQ:5yf42Q/7sBaJtzqJPzHYQ

  Score

  10^/10

  amadeyhealerredlinedodgedropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1