Extracted

Extracted

• • Target

    0b85b88e1821117575a87f421bd6ff59b04a4c6334d092c479fc46fb4525e2bb

  • Size

    731KB

  • MD5

    442e6bfdedced97e488d3c5942120d1e

  • SHA1

    2f8c6df03c90d60865105dbab0f2428a8b736018

  • SHA256

    0b85b88e1821117575a87f421bd6ff59b04a4c6334d092c479fc46fb4525e2bb

  • SHA512

    32eef2b192dd1dd0333904e72cca68a769147b292858938de4404db16011fc9d519c5a5030a3aecbf677d63263a44700458cd7566128609be4a19edf907053ff

  • SSDEEP

    12288:mMriy90SIDhMaBGsoKbtUnf3THRgTn9lfurik0ZDottu8hnPsr6:IyLBg/KnfTHR0lfumRCbpnUr6

  Score

  10^/10

  amadeyhealerredlinemagadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1