Extracted

Extracted

• • Target

    c6ddf7bcb1b90e5ad44d910f1cd71bdb2dea9dc6ecd8bd262d1284e0e5d0e239

  • Size

    730KB

  • MD5

    4cea29ae487fcdef1f2e1ae5581eb427

  • SHA1

    3e46a0dc38dd713c78c01acfe48c35d8725920f1

  • SHA256

    c6ddf7bcb1b90e5ad44d910f1cd71bdb2dea9dc6ecd8bd262d1284e0e5d0e239

  • SHA512

    84fb5ec394feb2813e7d86b2dceb851b4ef3906e0fca651ac48be73bace1b811b1bd77d8ad12b0e5eab040221e6c8c1ebee71be20bc74de5601730b76ccf810f

  • SSDEEP

    12288:FMrSy90T4J4XA9t9uMMgoK+me7XyzKR29Xrp7Cs69FdUP+KGjjtFv3VSC:Hy44Gw9t9uMBoV97X8K49lmdU2KGvtFX

  Score

  10^/10

  amadeyhealerredlinedugindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1