Extracted

Extracted

• • Target

    34e52bf50095ba26bf507692e5f2e65c93d51bb9c47a2fc2dcb5893dd2a8ae19

  • Size

    1.4MB

  • MD5

    d9e00d966e9e09c72f41ad6e6b674fd0

  • SHA1

    7605e41b5331a31bb9bcd6c3e9a1c84d5bb1b036

  • SHA256

    34e52bf50095ba26bf507692e5f2e65c93d51bb9c47a2fc2dcb5893dd2a8ae19

  • SHA512

    f90e7f11c0bd96b6a298ffbe8351cce4d96618124d1d5ea575692dddafdb0aac7143e31aa2fd9901b3f368533282f089008cd742a03d687d6f42f026a79df4b6

  • SSDEEP

    24576:myKjU+lZ9Xh7iKKeu+Y5QRnAKXQDvhxpDe4fJyis+pYCKMVqf3LPe:1SNlhpKeu+Y5NKXQD5xpDz/s+pZKT3L

  Score

  10^/10

  amadeyredlinejanginfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1