Extracted

Extracted

• • Target

    90efe349dc2d97c79406dbadac1e07cb05a1a0650b9a650921f64f513e3be17b

  • Size

    731KB

  • MD5

    717075944a36eaf2730bba2401e88f49

  • SHA1

    4ad41df243f5c8f03ba926d63ccfe4598d1e9381

  • SHA256

    90efe349dc2d97c79406dbadac1e07cb05a1a0650b9a650921f64f513e3be17b

  • SHA512

    6854f4ea52051b8667b44f2c89ff1bf1cf16f586fa6448f477d6ede7d5e8ccaa7a17982d9b9bbe39416dad829ccf5b8cfbc7a1b4361bef07168f97b497623cbd

  • SSDEEP

    12288:IMrJy90pVAR/jc6abpy57TI90STJAJIEHUGnZeFjuEsTmZdls5VZtGPUnshBix:xyo+jabpy57TLsAJFPnZeFjuEqmbPRhu

  Score

  10^/10

  amadeyhealerredlinemagadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1