Extracted

Extracted

• • Target

    3b03377ad9c2d87ba06c042ec47adebed8053ed7b0f5bb76a0f4db51733e2e56

  • Size

    1.4MB

  • MD5

    31e41452b9690f5580c2fc2a2d249918

  • SHA1

    b2ad618a55f503be74ae113710278932b9971367

  • SHA256

    3b03377ad9c2d87ba06c042ec47adebed8053ed7b0f5bb76a0f4db51733e2e56

  • SHA512

    fbd20d6387b77be0e2e26ecc289e126b77482675feec4e2e516a6e31a61e71e9f21d8f88097fd37d66ae257b71229abdba587a54c29cb23b7f470ca12bf58b62

  • SSDEEP

    24576:8ysuZgG7HA+yLHWczP4bplKAlI5Ez8x7WzFXnxu06palqWwN5K40dnU5VxRmCuek:rrZgG7CLHn6KAlIKcKpXgFpYKWdnUDxo

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1