Extracted

Extracted

• • Target

    y2455714.exe

  • Size

    1.3MB

  • MD5

    b000c124f1b56c362063d40a099ecd63

  • SHA1

    c02656cb6a24e2ba0b21373c3c355711d3b97ee8

  • SHA256

    959ba2ddd51a529fc94bcd2797607800f602cd2f11af3ed88fcaae72a04418cc

  • SHA512

    d59488dfd2977ba2e69a82cfa7d1417c8d0c963573e858ed296e41d7979b337ca221edae9a19682b6fc6c305b44101613d82103d22ee887106b483bc7f32f307

  • SSDEEP

    24576:FyWC4nFnG7fjhWinuFQdTXggfF+SVr1tTZDXaZ6vb0gU7R1VGUKij:gkntG7fjhWinuFiTXggNrjThXaA0gU7n

  Score

  10^/10

  amadeyredlinerotainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2