Extracted

• • Target

    si757398.exe

  • Size

    395KB

  • MD5

    9656d53d184ab79001e82bce0a639f1b

  • SHA1

    8d7d5ac5111285f190cb11f58cb3194c0b828569

  • SHA256

    fcf1a7ce106478810478f12243112b90762b08a546082d113ef1d2ef4c54aa1f

  • SHA512

    e65c8a5faadc2b8df7d3ed5923fe4086239ca21b2a206fcc6c46b04028df02750b55f84b8ccf9abcd7b217921b0547b35e8cd0ff5012d0d9920701ec4bc4e502

  • SSDEEP

    6144:WV0vRCjEtIraUyz76Ly+MwdL7//wQHf9NzO4TcegrGN+bb5Pt:WV0wjEeuUyzGLyAwKatDqSb

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2