Extracted

Extracted

• • Target

    46608f1bacd8c25703009cbc1d3bf83bc28d20b174215fa248320fadc712fe0d

  • Size

    713KB

  • MD5

    1835fa0be896118acad2179d32bce64c

  • SHA1

    82db95358705bc440c937a8eba817e1ad3f62ce8

  • SHA256

    46608f1bacd8c25703009cbc1d3bf83bc28d20b174215fa248320fadc712fe0d

  • SHA512

    fb3c3d2a035d5fca71ac774c189e55038046298922809f57afaabfea88322192370f211dbf493a1bcc8608c2cb8f417fdeec55506158427f6ba5756c47079472

  • SSDEEP

    12288:aMrFy907knvuVHlDs+IiIa46ayBpSMlPKiKe7AmsKRE3Xzp7bsTU1q6F:fyVGVO+/4ABHPNh7AzKW3Nym

  Score

  10^/10

  amadeyhealerredlinedugindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1