Extracted

Extracted

• • Target

    c4cc6eb3aebbde82e512c384ea2d63f4fe0f2b16d2b4f1b85a80360f2b503c2e

  • Size

    1.4MB

  • MD5

    9f9cb5998cfe57c4757249e45b59d6a0

  • SHA1

    2691f04b626115f351ae83013f062bb7e150ebf3

  • SHA256

    c4cc6eb3aebbde82e512c384ea2d63f4fe0f2b16d2b4f1b85a80360f2b503c2e

  • SHA512

    262556d50878022b8191771df86cf731b2dabdbfa847d3d3668b9e7a8fb0ca7a35825407efd7b7b85ac9b2cf669817d83062428b46cf5c44d1d04926f92405b9

  • SSDEEP

    24576:4yr1OUgMRpupH0nJ/PHKwupHdgiepxCET2sIxFlnTsYWzFgsn6CxgOSVGdTqZ7aq:/0pI4pHypKwupHOnCcq/szmVw5g+TW

  Score

  10^/10

  amadeyredlinesrutainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2