Extracted

Extracted

• • Target

    61d4ec388b021097b01d7b205eb1bc87dc0acd026a9892091210b1e8d28601cf

  • Size

    1.4MB

  • MD5

    87607d2497d0b375a43a7de34b706609

  • SHA1

    c153ba9d496f03ce5d89c5766fb1b1673302f07a

  • SHA256

    61d4ec388b021097b01d7b205eb1bc87dc0acd026a9892091210b1e8d28601cf

  • SHA512

    fceb501fbcb2a0cc552fa7a1e4d828a52fed3be0f11d9e44f99265a5c8d2bfd3271fcd51e567c773ba414e9c2d86a760ceab9d52aa84755d40a60d65901d051b

  • SSDEEP

    24576:NyUH9p/L4kt1UWoOKPrUpTxDP6ja+bHEDSnwq78YV2cH9O/8xmxPqjdPn5jnKLb:oqpz4a15KPrUp+a+bHEDSnwtYV2jirjS

  Score

  10^/10

  amadeyredlinejajainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1