Extracted

Extracted

• • Target

    00f6fdbc1290c3461529c72edfd2c3e19ad0f9225eb6a86b970e26ea55f4b3ae

  • Size

    756KB

  • MD5

    0118da7d39fe8895c20fff669ed237f1

  • SHA1

    b732200553112dc968be7c4d63762f067de7a7f4

  • SHA256

    00f6fdbc1290c3461529c72edfd2c3e19ad0f9225eb6a86b970e26ea55f4b3ae

  • SHA512

    ffedcbace550def013d147525ddd9271fe0d73859383a9a132db076efa6c794502d8b5766ed1c6a650ef5919664b7cdc409290bf7ac6f2623a72b809ca27ade8

  • SSDEEP

    12288:/Mr1y90MVsCn0JslVEx4tODZMBQQcjHdHjZ8RdtTf3kJnLkR3NqI0KNeLAR7ZMR:eydVH0kVEuGZMiQIJZ83tTAnLcQI0KNM

  Score

  10^/10

  amadeyredlinejonkainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1