Extracted

• • Target

    0x0006000000014b97-127.dat

  • Size

    205KB

  • MD5

    32587b3c81da526ac2a63d4a5ada0dc4

  • SHA1

    d9f173531b78c902bff5beaafc4360633613f7c2

  • SHA256

    f57dc054008a6db763dd0d87619bbafd55ff81301a6d858d3e7a1f585ab21c36

  • SHA512

    9b5607b2ca9bd22aaee28409b7487c2603de9088d52c32cd930dd3ec7f398e5da0cfde67036249c364bfdab6f6508b33f1a68abf3dbe475adb3d8563b048eb6a

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2