Extracted

• • Target

    87f4d0475836f47cdd74afd2cfe0f97f4f2f0b86f4d84f4fe4a6daa6cffc0c53

  • Size

    250KB

  • MD5

    53cce95f5bfb66c6f9a7394a1269afa2

  • SHA1

    25534338447d6dd1fd2a660278e570613ef838e4

  • SHA256

    87f4d0475836f47cdd74afd2cfe0f97f4f2f0b86f4d84f4fe4a6daa6cffc0c53

  • SHA512

    661a2eead2b394302fccafa0c7df71711b9013bef7454313603e95c0093b218dd0fe341b5fc3216ea7c3253f00ccd87247eaf186d91a4fff9032209836af2ef5

  • SSDEEP

    6144:Dg3O5R5hgK9vZPf9ZaSKNxphi39NOvpgY:s3O5RsK9Zf9ZafzpK8

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1