Extracted

• • Target

    0x0006000000016d54-88.dat

  • Size

    226KB

  • MD5

    d69d97fb7cdfc0253ddee687c3e2a6bb

  • SHA1

    570fdc694308f7a051c575e4606d99109ba547bc

  • SHA256

    742f15826871362270e8a73ee151e4df333ef1d7ad96feca9e58894ff6b693b8

  • SHA512

    e51334e01acfeab15771418c920097bce2856d04245debb472c9a038d4a7c059c2cc6c501999cb0fb15fbe80fc00d8d86869fe27d9536963d5d47c19b59a32f7

  • SSDEEP

    3072:oTzC4usLP+wOULUFAB3i9nyRA4/Prk3huiPFSbuZRuNcZVKOUm8LHIMbffWtsm3:oTzYsLdf/Rity237PFHRuNcPKOK3+

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2