Extracted

Extracted

• • Target

    f37aa606f20b3255b84ea94a00e074788a6ca6530c57ca98aa3a048cc2cf6c4a

  • Size

    1.4MB

  • MD5

    098c9003eea77440593c5ccc76ead29e

  • SHA1

    0fdf11f2ad751126a5d28a0f93fca9077c6a2bd8

  • SHA256

    f37aa606f20b3255b84ea94a00e074788a6ca6530c57ca98aa3a048cc2cf6c4a

  • SHA512

    c36a7c07635bc0878ceb30982c83e5c54caba212ced82cb4e5798da73bdbebb22ee8ac12ae85185e3b629e73d1d060f2c7e9ebdb308279a5f4b423b45a32a807

  • SSDEEP

    24576:Uyc+JywZvbjAbx6a+ijWDWes1a8WDO0qoYuR7PqdueRkScZ9KV:jjJywZjjSJ+ijWDWY8WDOIDPoueRk7

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Drops file in System32 directory

  behavioral1