Extracted

Extracted

• • Target

    40dc3e11e0018dedc0f6098ac371c2abe776e529d0e9885dc83b7a5453945910

  • Size

    1.4MB

  • MD5

    1e541dd679a7475d74c31ffd7263cb77

  • SHA1

    317b11b365a964b41a32c9281c508fedd7180c28

  • SHA256

    40dc3e11e0018dedc0f6098ac371c2abe776e529d0e9885dc83b7a5453945910

  • SHA512

    c76b67836ba4784344bb125136caab5119d59484ade30c622ed0cfdfcbc1bb873562b625b31130b72cb568e234a20e0a8affbd3c6dc8de534101817a2afc2831

  • SSDEEP

    24576:fyaKuENz5x2ngBqEpDKlI0teifJsBiCtUlDgM96F2PJsQh5ewrnFPkiJId2:qaGPWgUERKlI0ttsB5tUlDg2wUsM5Kiy

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1