Extracted

Extracted

• • Target

    7509416aa5b0abbe9052fde46ea909880a2bb853ca45867c99092d2d156f0e8a

  • Size

    1.4MB

  • MD5

    e9f7d644c1e9700cccd0259334316aa0

  • SHA1

    f93f6c24c70253c7623cf04a12b811f074ab5a54

  • SHA256

    7509416aa5b0abbe9052fde46ea909880a2bb853ca45867c99092d2d156f0e8a

  • SHA512

    71f3e347dfd50be619ef2bf7970f17c0e040d67c5e5f1fd5c6d7ef304a78ec779a82aac4b6aa7b6608f06d43d92ede7b37bc18a14838c9d31fce455fcb49b31c

  • SSDEEP

    24576:OyQ+oCc5OVQ2rFecIKze/mAeZQ4L4x9HnlMUBw2HDsVfahr4r0ZBD9UB23LHOhcr:dWl5crYKze/mK4k7+UBw2HDQfat629I4

  Score

  10^/10

  amadeyredlinenravainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1