Extracted

Extracted

• • Target

    067a0c14115103009c563e7b0b2864f10fbc38e174ab1e7dc3aee987940e978d

  • Size

    1.4MB

  • MD5

    dafe4dd43f3f1d2bd942eff128043baf

  • SHA1

    f1f90e84f06d2bbabdb78f87669a6070ee0da59d

  • SHA256

    067a0c14115103009c563e7b0b2864f10fbc38e174ab1e7dc3aee987940e978d

  • SHA512

    3144ab13bec1f1e1cea28cf845d3c277f2c5055f5597ac1876247bb2c00b3e7396ea32505dc6443a8ad2116484a1ddbd9b0c56cb7374c8aefe1c23145cbfc4e4

  • SSDEEP

    24576:lynq2owKSr122SqvJMOGbaVQrOgKv/aiFOnF5oQ+/wtXichYd7zXm:AnhJKSr122SKebaVQrtKnnFOFfGWichw

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1