Extracted

Extracted

• • Target

    a280890ce5b841957f5a590584aa29b41e7bfa629ee14c048301dc2f855b9d2d

  • Size

    1.4MB

  • MD5

    58abad0ec958c6eb12fd6226475f6100

  • SHA1

    e41d5c7a0b3d475f8bd34ca6c9565f723d919424

  • SHA256

    a280890ce5b841957f5a590584aa29b41e7bfa629ee14c048301dc2f855b9d2d

  • SHA512

    230c6cea395834d7b0c3cb19906a2240b72722934c6d7c06beb4d78e3af62bcd138eeb332ac14662f3c4ba6592829b50f89b420db2138a3b2409a92808f3a029

  • SSDEEP

    24576:RyDlK6kZNntywCvDVRqbxKM7Lo99QJiIFU8AhgkLvuIceCrZaM5IRG991671:ED7kZNOv/8KM7LkIL5kSxecZBeGR

  Score

  10^/10

  amadeyredlinenravainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1