Extracted

• • Target

    50f8a9b957e9fca887ddc655800288b549c074ace2643736388c9813d9120865

  • Size

    1.0MB

  • MD5

    cca6f728e75a6b43c468622f8eaab702

  • SHA1

    24016271d528e55de39fad0fc3345533d11866c8

  • SHA256

    50f8a9b957e9fca887ddc655800288b549c074ace2643736388c9813d9120865

  • SHA512

    e3a98a7a7e27674abb7b11cfaac3fc4572d879001a1b6313680ef62dd9b607dd97f043997010fc9a60dbc7aa5f396b9c3643ee5f0a315b6183dfe55e3a5d98ad

  • SSDEEP

    24576:/yxab8o+Df4lSeqRd3h9uTnrBA4Zh7OFQrMWTMeHskzHE76:KgQoQ9xhIvS4Zh7CWrMk

  Score

  10^/10

  amadeyevasionpersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1