Extracted

• • Target

    9702e18eeb969d8aa4204e28f2c32a4cc35b1ba6b577676b8da485cacda834bb

  • Size

    246KB

  • MD5

    f9c1afc8d458947bd27bff1b476e4b81

  • SHA1

    fab0ad4eecca9c084f3053f7d7edb06f4c93105e

  • SHA256

    9702e18eeb969d8aa4204e28f2c32a4cc35b1ba6b577676b8da485cacda834bb

  • SHA512

    f9266ac739d1ec13fc0fb8da9195627b794ea5c7240585d7b4669b587cf4ae2fd5eeffae1cd3cb6f0fe1b6d7c44ea37d68c59c26eb3f60473f31843dd1495fc8

  • SSDEEP

    3072:2VNuYK84WiEkK54Ny7hyF82Ph+Bd68i1yWWC4Kc+v9P+AdqlHHiVHQjh:2V6DEtyF8u8mFfxRwn8H

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1