Extracted

Extracted

• • Target

    88aa7a094b0e069999e3d3c3010868391782e972b9ad95d95bfedbccde62f213

  • Size

    591KB

  • MD5

    4ef065f629781183032fb4cb8e96bce6

  • SHA1

    c663addc912c8e5f4ba7b2f410282d5b3f0664fe

  • SHA256

    88aa7a094b0e069999e3d3c3010868391782e972b9ad95d95bfedbccde62f213

  • SHA512

    8fc5e79856e2d627db1a6cdd4bc9159c2b0e86e59e318b05a927bc3e4f7eab329a8eae30b10953063a1ca0dc119c5b9fd06fa18da1b79b07ccbd04d794e42706

  • SSDEEP

    12288:/Mrty90aE/wFsROFgN491AXqswqAfuAQScNtOG7DrIITQ/AQvUaI8T6k3OSK9:myFEqsxq9O6swqAdQSWR7DrDq8aI8+kG

  Score

  10^/10

  amadeyredlinepiterinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1