Extracted

Extracted

• • Target

    1b0661829723768b71ca97aff53718e0d521e49cdecb84121e66fb3672717868

  • Size

    730KB

  • MD5

    ef443b2ab2d152069a64c286398a5777

  • SHA1

    fd588ddf5726f4997a0bbecd5c8046cf34191efb

  • SHA256

    1b0661829723768b71ca97aff53718e0d521e49cdecb84121e66fb3672717868

  • SHA512

    892d16aece949cdb4325d53cb54bf3480df57785a02ac02aedbf25158ebe0346ea71240d934bfa6c6589cb35391f9308f19f9c13ba96992b974b7948240e9c77

  • SSDEEP

    12288:6Mrky90V0PmDfVCXI45/zKiILjMmftk/KKue7klkKRIUXFp74Iudnbyniux0S:6y+0EfVCdRKZMmlk/hV7kqKSUn7udbyd

  Score

  10^/10

  amadeyhealerredlinedugindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1