Extracted

Extracted

• • Target

    522e808d0b237e6a59d818a1046fbbdb82175fbc414f54135835aa5fb8a874df

  • Size

    704KB

  • MD5

    53a14a456fad21dc73814d0ed1965307

  • SHA1

    a7b503ca75c683cebc048d48bed14802af6883e7

  • SHA256

    522e808d0b237e6a59d818a1046fbbdb82175fbc414f54135835aa5fb8a874df

  • SHA512

    5e78f2421d3d61bccc54fe080f45e055fbc8513ba6ce0633ee9b452fa63273fbf16f692149e17f09cc594791b2e0f8a2dbe1bbcddce0bbd25e15a2b05f0f3c04

  • SSDEEP

    12288:tMrIy90smyW3WyqWh58WWRjwSRziFiJyL7HuL3j1nm:VyCP5bb8jRjz1FA7HG1nm

  Score

  10^/10

  amadeyhealerredlinenravadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1