Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Detects Healer an antivirus disabler dropper

Healer

Healer an antivirus disabler dropper.

Modifies Windows Defender Real-time Protection settings

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

Suspicious use of NtCreateUserProcessOtherParentProcess

SystemBC

SystemBC is a proxy and remote administration tool first seen in 2019.

Downloads MZ/PE file