Extracted

Extracted

• • Target

    8dcb5a4e4edc2ba7c244a061818310c72366861a7113bf124cf560b2fd24d0f9

  • Size

    592KB

  • MD5

    6ee2c8ef8c95f7bbbcb275baf4a62c57

  • SHA1

    74d849c2ae312f03d6389b7e1f9d0c2b7ba57909

  • SHA256

    8dcb5a4e4edc2ba7c244a061818310c72366861a7113bf124cf560b2fd24d0f9

  • SHA512

    d05f5f85783df737deebd363f008ad5de7d577345052b51fe00c7883fc793344e0ca015a0675b567955cf77d96c8c6ee3e657ab7001d3163f32dff47d5757183

  • SSDEEP

    6144:KGy+bnr+Cp0yN90QEVdLUwEJjPAmsCZcbBc0ptV4hGm+VD8dBJ9vFF3RA+7cwgdB:2Mruy90yJ4msCPhAmdBHvdendwOeRI

  Score

  10^/10

  amadeyredlinechanginfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2