Extracted

Extracted

• • Target

    cb68b382c9d86ab41c766c68b07e9fc3923523355d2b5b74f921534fc00f72e2

  • Size

    756KB

  • MD5

    fd8bfcbed640416126eb2c433c4b8494

  • SHA1

    333bcdcd8c71ebd19805528d8bc2718ee25f812a

  • SHA256

    cb68b382c9d86ab41c766c68b07e9fc3923523355d2b5b74f921534fc00f72e2

  • SHA512

    9ea0b318c1f64231cce1e019ceb753521b9922a49bad58b1ab952d3bea12d91e372e2f83bd39a988899bb64ac675de0665705921e26c1dddb2e5d911e5a271f4

  • SSDEEP

    12288:CMr/y90ew/dmwVWYm47t6+oDDO81Knvx+mRi67zsO79jzV7ZMqb:9yZw/dmmv41i84nvx+mcK7pzVp

  Score

  10^/10

  amadeyredlinejonkainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1