Extracted

Extracted

• • Target

    d84ea300ac6fa29d1064c2e8de976a63c064e488386bba74ddb8a6bd8b8adaeb

  • Size

    1.4MB

  • MD5

    7bea4c1b2c1c794a7be31ba32e4becfa

  • SHA1

    4e796169ebe1948e91e10cd1e8d439085909d250

  • SHA256

    d84ea300ac6fa29d1064c2e8de976a63c064e488386bba74ddb8a6bd8b8adaeb

  • SHA512

    aaa7c2df64764f745d5c8729064a9d56992787c1005bca163c66b1d27f5310a3d2622ce2303de758eb13e3eaf6f56bf6b671dc1a76389da723b58b395b3b5d93

  • SSDEEP

    24576:TyamOXobtbhiM2B+iKtuYvjNMEqxBRlC1aVqD3RZKn4+3mLMUD32:ma1d3XKtuYv2DC1FD3RQLWZ3

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1