Extracted

• • Target

    Amadey.exe

  • Size

    244KB

  • MD5

    c89d3d00dcafd7e5cc548fce8b9d55e9

  • SHA1

    563347fab5609658a1f6add8fc425f95826ff0a8

  • SHA256

    aaed0a4cfb14c695f2977d6b96e63d045ff2d18be0c0f6ed1652bca03a370a64

  • SHA512

    c838057c6370d287d7a1905a3383eae5804b18d4e9562bf0573082e5270a6fe08d4e0808ff47c8754d5e0bbd8903126123354507ef4f60d50336c0d087c88ce1

  • SSDEEP

    6144:4aKMNkZYYYRHqz5yetq1+Gvuli30os9ci68:ndayF1tuli30

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2