Extracted

Extracted

• • Target

    f1f1698739705ff24efa61018c6382dfdddb47992b560ebd3b11f2ed9a97330d

  • Size

    756KB

  • MD5

    9fbf1ef1e282c98e870c134179069904

  • SHA1

    25a35a972248f642e4f96b84e46968c16d751ab9

  • SHA256

    f1f1698739705ff24efa61018c6382dfdddb47992b560ebd3b11f2ed9a97330d

  • SHA512

    d0c4c8fb321dcc23277d2b41ae6d262587130daf1f1b53f85c9770b500d0e447413a015850eba3e12fea609650089605f48e1db901053d0c77e463b7a21a6e0f

  • SSDEEP

    12288:2MrCy90DUsb96DO2DC1EM64iuiPlv0E51znhDCiy7oUA7ZMubS:8yCtb96imC1lkmE75Cjo3+

  Score

  10^/10

  amadeyredlinejonkainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2