Extracted

Extracted

• • Target

    4ca2ad38892e9858975063807dded8341baf461c21dd71039d667aaac6ac25ff

  • Size

    1.4MB

  • MD5

    bb548bc48865580886a6db6943e572b3

  • SHA1

    df7e1f80c7951f91ff0eb4fda164c75f93272894

  • SHA256

    4ca2ad38892e9858975063807dded8341baf461c21dd71039d667aaac6ac25ff

  • SHA512

    73962d6f8d7fa055abbe403bad433844cb7a7bfc9465f02a0c3c72dba1375c889f3fc27f0d1d78b428686c053f9ce1e52d496b7163a180348c2f2c29e72b1aa5

  • SSDEEP

    24576:yyK/giB+jL9Wm0SSnFTsrB04oG5WA2iyJb9hU4viQF+3NIooU6pd/2g0SFa:Z/igjAm0H0B04otATyJb976QeTon7/F

  Score

  10^/10

  amadeyredlinenravainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1