Extracted

Extracted

• • Target

    0b9b26fc05e857b7b29c1c89c9741bf5831b34404af70aa2f9e8622eceec3d37

  • Size

    704KB

  • MD5

    f0168c36e5cc339f226a6e5f1f7c61a3

  • SHA1

    3715b59481badcb50d2461b4c1412885c807a71d

  • SHA256

    0b9b26fc05e857b7b29c1c89c9741bf5831b34404af70aa2f9e8622eceec3d37

  • SHA512

    1346e60de28d2b8f14cad30617e75da38039980cb67f7096aa5b6053cd9559c726f258ae2fe69bf75113f016ea3264715c0a7f36d285e59733bbdd904cb28a95

  • SSDEEP

    12288:aMrxy90P6BK8qAxUDjBdtxvpbTNiJ6x6zVe/hLeseoM1n:TyBBF8HxhbTE4Yyep5

  Score

  10^/10

  amadeyhealerredlinestasdropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Drops file in System32 directory

  behavioral1