Extracted

• • Target

    0x0003000000000733-2446.dat

  • Size

    230KB

  • MD5

    decc8fbbe94e8960d204616c23a460c8

  • SHA1

    5aaf2619a1f66ea937cc543d7ffe0db2f145ef2a

  • SHA256

    adf3cb3699574f5562fb0ccd93a72437d5236bfb2d3d94508488a2596faff374

  • SHA512

    b7b36a22f21881ed0da377d4dffca3cda80fb305f84981cdcf380739ca7cccb06a03e49581f82c2c9b145e2524989f51b1554d57e4351f4f84c383cc276b3b7e

  • SSDEEP

    6144:mKVNIG75NpcElElt/DgK1yuFShFBr2D+:/5KE6LguFS7BB

  Score

  10^/10

  amadeytrojandiscoveryspywarestealer

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2