Extracted

Extracted

Extracted

• • Target

    setup.exe

  • Size

    270KB

  • MD5

    09529691c435ed46a0422708924e0472

  • SHA1

    ad73084360e5ffb5e9a9746657f54d3d82833c92

  • SHA256

    64b2e7b56666743d248603e9c949e06576732047254ad4b886a9f85acb43d4d5

  • SHA512

    c0c84f71a4a17e08e92233aab1da0d751ea36e5798f2ce46f1b0a24d8ab9945eae5ebf5cfc33fe494de86df9ef03d98742e53c871f910d36dce16dbce2bf4afd

  • SSDEEP

    3072:qq+PI4A+RFAbbczH88n+vMhkBnNYKjLwWqFyW3XptpUn78F:x4LCbbc788hQpHcyW3V

  Score

  10^/10

  smokeloadersprgbackdoortrojanamadey

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2