Extracted

Extracted

• • Target

    6cb2b37e0fa1321d5bddaced86fbab75b8cb2008b9aaa157e5946783a2165644

  • Size

    591KB

  • MD5

    900db697b3553d914aeae6bcaa35cf4e

  • SHA1

    6216c9781fdbf4c2dfbaa4ede4cc5ba9048c6f33

  • SHA256

    6cb2b37e0fa1321d5bddaced86fbab75b8cb2008b9aaa157e5946783a2165644

  • SHA512

    2bc6aca6076c296c5e7f42c608cfc006880cb010811d06187dcdb3dbea12fde4442156a9303b6b5c502658f8c084d22c1a1ca04f43e9e9930fddc7bca5dd5563

  • SSDEEP

    12288:0MrIy90N5W87h8JSCui0GnH40VS7jIy4y2RKCSnQstp+BA:Uy+VgS1yH3coPy2RKCSnft/

  Score

  10^/10

  amadeyredlinechanginfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1