Extracted

Extracted

• • Target

    a34fc3155fa14a46756b68477949b2653663604648c2d1f27833194cd498047f_JC.exe

  • Size

    1.4MB

  • MD5

    15bb8ec418b36fb71fb49546e4975b8c

  • SHA1

    ff04fa7e4035b3fe4207248e6496db83bd6ebbec

  • SHA256

    a34fc3155fa14a46756b68477949b2653663604648c2d1f27833194cd498047f

  • SHA512

    9f11b9b2f7f8a7f9fb9db053f421b0807353be6278e229bd7b98a3dc748acbe48ba1adcddc7ca267a150c63bf1d661ead127e74b11b22171dac20ff1f79d62f0

  • SSDEEP

    24576:FyF8DFxgI9YubWKpTMTigQDnt9QRROXKDqaWpx8uRowcqccy01s46V:gF8DFS0SKpTMe/DntaRkXm+3eqZ

  Score

  10^/10

  amadeyredlinevagainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2