Extracted

• • Target

    a5f180e29699f8ce656f882a024cae59deeda1789024edc172f6abda555a984b

  • Size

    259KB

  • MD5

    c730c539382cda48a660da457ae4d6b0

  • SHA1

    61209709407dbfd29bdaefd73c35263ff1a739c9

  • SHA256

    a5f180e29699f8ce656f882a024cae59deeda1789024edc172f6abda555a984b

  • SHA512

    9434251e045705dd9b5f05247efc0f7c5a7c98b73d3a9dec543db816b5d58da0ea8307811842398c4cd2ee49b99bd8423c150a216665c77e4f3508aabbf81305

  • SSDEEP

    3072:XzNZGzNQTRI534Sw9vxkgxvZfJNflm5Bk3/VwrEiO7lqAmCp20hTDw02rwlAf1/:zxTC4SeLtNmwVwgjmj02slK

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1