Extracted

Extracted

• • Target

    8df65896d2dc1d42a19314d7779f8c1a2d4cd566fbfe983aab78dcf8e901cbc8

  • Size

    1.4MB

  • MD5

    2a85dbaa24d76c244bdf3fa40f862ae5

  • SHA1

    f64f25f6246e0edf8e9a634ead079515214e281c

  • SHA256

    8df65896d2dc1d42a19314d7779f8c1a2d4cd566fbfe983aab78dcf8e901cbc8

  • SHA512

    8c8e1e0cb6728076252e06fc5aacab88b137f609751937e8b78e4d5446c94ca00ee20b6e327d5b738bfa116ee2562c613c5e540b59ae58d725fe8b611dd880d9

  • SSDEEP

    24576:XyqZ7a9uXbTiXIRuxuKWrQlhXm7W74NZ+cHn3w2+g/Xuxqeg8OptT95T:iqtv0uKWrQltzMng2dmg8atf

  Score

  10^/10

  amadeyredlinestasinfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1