Extracted

Extracted

• • Target

    95c8bd241c3eda0f503228de44622310173a5d46593f3c3d6511cb415b2060d6

  • Size

    556KB

  • MD5

    4ee0c53c19c613ae16ed100587f14053

  • SHA1

    e02cf7fbecb6ab0204a893ebeb0b2bb77f9071d7

  • SHA256

    95c8bd241c3eda0f503228de44622310173a5d46593f3c3d6511cb415b2060d6

  • SHA512

    36e500f4d1126ce6d6a92c6ff2a08bbf184adc36888effc943af5c9488d30d1efd31c14610a42b669845790598a76a5e2d189d7f3d8ed41a93aefba46ad325a4

  • SSDEEP

    12288:gMr+y90AAP9sA7LmkPGHz2SwpM5B32N6kRruoy:uySFsAuZzisB3814

  Score

  10^/10

  amadeyhealerredlinedodgedropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1