Extracted

Extracted

• • Target

    2343936580f6d94a7c810cd7e644b00fe5df5ab1fbeb2c445a688795d4455114

  • Size

    1.4MB

  • MD5

    3bd86e27a12c2778c456c42763ebb387

  • SHA1

    b89de48da79be2327850231fe60e09044a7011ae

  • SHA256

    2343936580f6d94a7c810cd7e644b00fe5df5ab1fbeb2c445a688795d4455114

  • SHA512

    4914e986dfe02af4a9cec1c376db23b1ed09cf4ddde6eead5bfb67ad7c7a0ff31ee0f2f89ebcb3cb27636b3a1e56c87ee4bf568030778a75761b5471945c4bef

  • SSDEEP

    24576:ry4PwVDj5yh9jTyzK/IQCumPaAoST6crVTZzMqxJwtjRxo2TgedQX/Lx8:eye8f3yzK/IQtmSO6crdyamVE2EB

  Score

  10^/10

  amadeyredlinesrutainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1