Extracted

• • Target

    0x0006000000014497-127.dat

  • Size

    205KB

  • MD5

    2e31cbfc8785719deac9dd4df4fddf3f

  • SHA1

    8d294463d723cca86cf6483d8e8ece73a4f42fa4

  • SHA256

    96897d2d77f0d1a2f6d61484ee8ce4e3f7fc57dc022787a063729c2662cf5cd0

  • SHA512

    0478c53bd24c762d126ca527f9fa3f514e66725935a55ad5160daa1a8b2e865132560313d911d51db766150c7bfbecfba223a21f11870873f6aa590dd92f96b3

  • SSDEEP

    3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2