Extracted

Extracted

• • Target

    8c97482e061a13c787dcafa2ecb690f3.exe

  • Size

    831KB

  • MD5

    8c97482e061a13c787dcafa2ecb690f3

  • SHA1

    573542dd97c1b50bae32de968f8a9d9caef4abea

  • SHA256

    5fa3a45d39a16a617d2c0b7658e7ca53ad73294ace5d7f293518ad3d54049377

  • SHA512

    bfb3ce4d1562d34a777b1047eb630bf8a9e7443210d65085fae3767e87073fd4fb94509304b0b0f408ff5f2d3aade825afe2fc77abed9828d66557d8fb49a377

  • SSDEEP

    24576:Jyq3mO9YrnFYSOouKH+gOIGPfC7d+PlOpnNz:8q0rSnPKH+gdsC78PoN

  Score

  10^/10

  amadeyhealerredlinedugindropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2