Extracted

Extracted

• • Target

    c2f8cd41bce88cbab2ad7420003aaa7121c8a7c7c6bd6905f98dbc5aadf3943e

  • Size

    1.5MB

  • MD5

    deaf13fc1c09b2d102e32aa31ff66d0c

  • SHA1

    79d096fa489a637c1c9da39321538b89a0abcecc

  • SHA256

    c2f8cd41bce88cbab2ad7420003aaa7121c8a7c7c6bd6905f98dbc5aadf3943e

  • SHA512

    03fde286751a29f51dbeac658dd6f41f105db1a323f2173b45170ad6243f979f6391f4544ccd23dcfa05da299658bef39ed461afc438dc0cb3620da8593ada4d

  • SSDEEP

    49152:ZiOGG7/RqjKjEQ/HCoJEdWyOPqyWpP+sAD1:EwojKjEQ/DS0sY

  Score

  10^/10

  amadeyredlinegenainfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2