Extracted

• • Target

    9572466d622f71b0f623064d381d4a4a2df3582074f3b828e555162fff953c93

  • Size

    354KB

  • MD5

    2b8f7b49ea2a9e7bd94a238ce6bca52e

  • SHA1

    5de3a09a828d623164f665d76c05e0950851667c

  • SHA256

    9572466d622f71b0f623064d381d4a4a2df3582074f3b828e555162fff953c93

  • SHA512

    87aaea88c50e58aa269c274c8e075c74f3e4278dc5c67bf8c154e55eead98cf56571bf63df38ab7520c7079c66eeb091579dfd725fb626565ebcaf0a1efba18f

  • SSDEEP

    6144:cEeTy3DE3a9pUt9y1L7PN2L+eRpuE3pF6npCR4E3sMDmshnkf8+CwbG:4AI3lszN2L+s/anpG4E86zc8wG

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1