Extracted

Extracted

• • Target

    118ccdf86aae61b42aabcea51a596b3c5010a61d1e0a6e261cce9719d61ede0f

  • Size

    1.4MB

  • MD5

    ccd4c03812b7dca4f49a926d7262e206

  • SHA1

    ba5b7d8f0c4dc1efd4b13da80319a5a5266110ad

  • SHA256

    118ccdf86aae61b42aabcea51a596b3c5010a61d1e0a6e261cce9719d61ede0f

  • SHA512

    dc26e3db4dc0d462b4ef84f447da0911989206fda9f9c6744061a14ad2bf57a2cfd1258f54db5a55b025b5de62928804f21db3c44fda63b8fe0ac52cf179b2df

  • SSDEEP

    24576:xyAllJgkUYOLHaw6IqWFJcsQn3DHF+9gCY5AlNf5uDxHx0Wzj0lm5k:kApUYaxAgJch3DHLCCAnf5uDdx0MU

  Score

  10^/10

  amadeyredlinerotainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1