Extracted

Extracted

• • Target

    5cec0cd02b294de7924bb10aece0c53ae0284d075fb6d87ef778c20438c9bc43

  • Size

    1.4MB

  • MD5

    d47a8c2d0a191e4d96f077fea625cca0

  • SHA1

    9ab449a362f799ba031f70ecbcf93295008c4ab6

  • SHA256

    5cec0cd02b294de7924bb10aece0c53ae0284d075fb6d87ef778c20438c9bc43

  • SHA512

    f6c0d6ab6deb8858f8d97031bded7ff3444244ba68481389013676ec09bb921ea4dc70a229fcf4f56395b5edb3406ed7c1937bd4d6ca1d796fb335f4f500354b

  • SSDEEP

    24576:eyU1jPR3xuSqIyKle3+NqoFtg/G1nY5c35VHLi0VWhQnCnYfLL:tUlR3YKle3srEe+545VHLi0wh0CnYf

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1