Extracted

Extracted

• • Target

    fdcd52bdf608b6ee9c6a0d699ad312865767200e1883b17fdb64a379bc2825c5

  • Size

    1.4MB

  • MD5

    a8253c8eb86b87ca39d4e3e0cadfaa7f

  • SHA1

    10d5713e1a941e7e31c5d0820fb9e22070480b6a

  • SHA256

    fdcd52bdf608b6ee9c6a0d699ad312865767200e1883b17fdb64a379bc2825c5

  • SHA512

    8e255cbc3bde43632c4d0250711266bb70ac47ef78234e07dc135dfd4202cb23ce2ad45af35708cde8ea14bf02613720ca8bcda7e9d352c761720d5e2e1fbea9

  • SSDEEP

    24576:ryVxog7wX5Vs5wh7w6KyPq196GG5L0bP9UZPuJDwTl97cMkDgqrrzvT+:eVSKeOwhU6KyPqDJG5wbPDJDwTlahgqH

  Score

  10^/10

  amadeyredlinevagainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1