Extracted

Extracted

• • Target

    ad173c438861feaeddbc5c9a23af51930df05cad4d2141a6a21b0682a6ba7a00

  • Size

    1.4MB

  • MD5

    01dc5223bc6624a6eec83af3f17b2219

  • SHA1

    2f54c4fe22ced6f42e87f67021d0756100d036d9

  • SHA256

    ad173c438861feaeddbc5c9a23af51930df05cad4d2141a6a21b0682a6ba7a00

  • SHA512

    78092143cb0c60ff6067ac75d94768a59442dc4bdd3fcebf187842c862d88c7bd435e78efd46abf61cb42e07af66a83829ae9aad897107e29e067ad306df4083

  • SSDEEP

    24576:FyeFskmuyOzSaeQJD862Kowd1ir1Z4wCxZuEkUi:geFskt+aeQJ86oeYZxC

  Score

  10^/10

  amadeyredlinerotainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1