Extracted

• • Target

    ace416395a3b0c51ece0f49f5117f6e0d4753ddefcfeed8621cce3139488a347

  • Size

    205KB

  • MD5

    7d4a83f6803b772947f49e0fa019d370

  • SHA1

    c17517033f21a1f742eec9d8508937054875f160

  • SHA256

    ace416395a3b0c51ece0f49f5117f6e0d4753ddefcfeed8621cce3139488a347

  • SHA512

    11641c73ad3c90b5bf880a0956e8d2b82ed8cdd3850c48494845304de45e57696f282e728f47fef0330de4a04b39901b8a6a889ae6f76afae3005612b381de41

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1