Extracted

Extracted

• • Target

    4d523dee6c1b065812603eb1585a264c674591d34f7f8c2d2246f242afcbc89b

  • Size

    1.4MB

  • MD5

    3f8c19cefd9568206bfa33cf69de71a8

  • SHA1

    03646efa4fc9df9f8e24380202673b7ca3158728

  • SHA256

    4d523dee6c1b065812603eb1585a264c674591d34f7f8c2d2246f242afcbc89b

  • SHA512

    d56655011880556f632d4070af802ee9016af21bd43b15c34c85dae7d92847aab70049a8ce79267597ef073a553b6b98b46d224a8ba400351ec49080390411ed

  • SSDEEP

    24576:pywLRucX23uJLeklVg45qC/sKwb19GaedeAbD/3oNEZgAE6V4q8CWgU:csTm3uJpbAC/gzGFdxH/3oNsEs4j

  Score

  10^/10

  amadeyredlinerwaninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1