Extracted

Extracted

• • Target

    f9cc5413425c62250a1be1fc8e5a959f946db3c741049a56b092efcdefe506c7exe_JC.exe

  • Size

    556KB

  • MD5

    2ac119622759be76f82a7d50d6a36faf

  • SHA1

    bdf753a3547769d7b32fe34d54f6f42082af77b9

  • SHA256

    f9cc5413425c62250a1be1fc8e5a959f946db3c741049a56b092efcdefe506c7

  • SHA512

    61f61f0a303640246fc0f38f42e323874d47db644cdbf7d64262202b9c2261d7ea278b63aeafd7e4559ef7156268b978f3137c5e9fb0faa1ae2c4291f1cc192c

  • SSDEEP

    12288:aMrCy90y+aieIvzLTHFOv+yUh++eyPWzUZxBJ1fZwz/64:cyP0nxOv2+AVBJE24

  Score

  10^/10

  amadeyhealerredlinemickydropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2