Extracted

Extracted

• • Target

    93aa565b60f2e6078e5147631653b08e554e856556d06036e0b2dd3ba0d073f9

  • Size

    1.4MB

  • MD5

    c72ecc9875c1d6a7147dbfdb3544427e

  • SHA1

    98c1ab3a02528ae2ba7066f97d5b67b8ac8a3b04

  • SHA256

    93aa565b60f2e6078e5147631653b08e554e856556d06036e0b2dd3ba0d073f9

  • SHA512

    bc114a0ad811976e2c4fde8a8d2ed9ad8aa990444064090f40c5596d2c52b47043a297a6ab8f3aa83396f5cc09f58d0757dbf5561fa8159d17519d982f4b98ac

  • SSDEEP

    24576:YydToYZPyKOe3v4z3aktj8MwHjMMmf4aFlM1UREu4uH8PWSrz/or:fxoYZq8fkx8apMeR9hSI

  Score

  10^/10

  amadeyredlinerwaninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1