Extracted

• • Target

    lr963701.exe

  • Size

    396KB

  • MD5

    be9c236bca2e10614cc2475261e801cf

  • SHA1

    4204d4440af6d35a05b4ab5b0a1bbb238117d010

  • SHA256

    0d05e645eb7857aa1b02a7b24da4b1582b77fc640d30b18be95b894404e8f59f

  • SHA512

    1eec9ec538c16a85bf4f202c2c3c9898e24b6ed00799dc533815cbf4c93316b885ed8b0081b5faffae7dd71ffa117eea03a358e7b43869dec0a6b98d7d214cb5

  • SSDEEP

    6144:FwgkiwrnlpqB8BHmqR5qlX3tTLT5K6k2JIgjYHwvpHwohz22:FwHZLlpqB84q/qttnt5JIbQxQ

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2