Extracted

Extracted

• • Target

    467345e55fbdd6fe693304427420db8d61b9fe44c06228da06427e816931b1bb

  • Size

    1.4MB

  • MD5

    27004f2ed38e03f283c4bf43719cf5a2

  • SHA1

    c892666944937885f965fe040055cdf53eb915f1

  • SHA256

    467345e55fbdd6fe693304427420db8d61b9fe44c06228da06427e816931b1bb

  • SHA512

    8b4569863cf796a882e5d48dc40dda7f1c61236318c870e0caca2d3835d921489ce94ffddc47bfb6a790d1a9e63a9f23c972cf0913bd027094ca1368e75c0be9

  • SSDEEP

    24576:by9PzM31X3a7eUKbr8otAKTF3RPQiGSFS6f6S0plN4+JFy6nPAaS2106dTWxy38B:O9gFX3aaUKbr8otPQ4FZ6Si34MFBPx0e

  Score

  10^/10

  amadeyredlinejanginfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1