Extracted

Extracted

• • Target

    f0911e1156be54a331a264b76363cff3ccc5d30914bcda65f1fe8cb9d9d25eea

  • Size

    932KB

  • MD5

    36e9d45f706525ce1b21b4f2d3323a4e

  • SHA1

    df5ee9fed16da1bfa045ba4f0feb6d9e09503582

  • SHA256

    f0911e1156be54a331a264b76363cff3ccc5d30914bcda65f1fe8cb9d9d25eea

  • SHA512

    b3f4e8c2a55f6df1bc164f163fb42fef9229940d195ccb2cfba9ae8e6dd8760412beb094446c6f45ff414903f20ed9b29faa541d499bd96541746b13771cd8f4

  • SSDEEP

    24576:cyEOTU4tR0qMFmSsq3s36qYTYXMEiD7sZlvt:L3BtDKM36qYEQD7sZ

  Score

  10^/10

  amadeyredlinegenaevasioninfostealerpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1