Extracted

Extracted

• • Target

    8fae2f55f76ce7e6837ef80acd0e6d03c4cd3eee4fef86c6bbd0df4aacd30db8

  • Size

    1.4MB

  • MD5

    0540677d63a25c7646b0c8224c053bdd

  • SHA1

    a27dd2d24fcafe3127d49d21b699b9d26c75ddaf

  • SHA256

    8fae2f55f76ce7e6837ef80acd0e6d03c4cd3eee4fef86c6bbd0df4aacd30db8

  • SHA512

    d710c65df18c1d70a0e5fbbfe8004f780da1b6c057b4f6204d261fe6588418ada06bf0aa304de05185d36731ea9cee2975fbc1ba9f13174c00e638fdf9defa99

  • SSDEEP

    24576:SyZ72pzbU5QR6x4J4KQ6k+KPo5fR21fmOys8C51EdhzGyP7HbtNubYdAmZJbZw:5l2pPxR6uaKQ6kXPo8yxCMdhy47HXubK

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1