Extracted

Extracted

• • Target

    7aac73f8dba1f0ef5185594db1fc3be66a65c9ba0dfeb7ab58ec79c67eb2fe6c

  • Size

    1.4MB

  • MD5

    83e72bf51a9ae7f3d9612efc9cfad5dc

  • SHA1

    b67ab61df276f136fac3db223ff53711cc86864d

  • SHA256

    7aac73f8dba1f0ef5185594db1fc3be66a65c9ba0dfeb7ab58ec79c67eb2fe6c

  • SHA512

    6214d822e7174416e758c618cd6a0e93ce6d4af1b285e0a1c510c1650e89f4c5134211109af9eb81009b6c914cb660720d379514c7a3607292b8d7c6f115f712

  • SSDEEP

    24576:QyTVLUwHT3d3eKglt2VIQSo8o3Hh/Gpm4r6opL28nkXfHnZOnqeIxWf8Y:XTVVAKgltlQS5+hYZppL28nkXf5KqeoW

  Score

  10^/10

  amadeyredlinesrutainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1