Extracted

Extracted

• • Target

    x8409147.exe

  • Size

    433KB

  • MD5

    97317740de3ee0deb89157811ae0cec7

  • SHA1

    85ef53be889d5781e7ff556799526808a2e5bebb

  • SHA256

    4be5ce619ba737296914e41f68bd3d57a74f578b77abedafb14668e3287004c2

  • SHA512

    40a2bd1e6185c3f45090c2dbb1ea96b0a6b84fa844cc1dccff4e7fe488d0171006fa53a0840e84bfbfccbc09a8630d6fc11cdbbd5939609c07d75166c47d810a

  • SSDEEP

    6144:Kwy+bnr+Sp0yN90QEbnyHXxmCVqPjm2sQmMjYjPlysEs9j4UOtSzrk:wMryy90MXxmCVOjFnmiWEMjrIurk

  Score

  10^/10

  amadeyhealerredlinesrutadropperevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2