Extracted

• • Target

    y3394774.exe

  • Size

    320KB

  • MD5

    509da1dda78d29a6dd036420d9693729

  • SHA1

    0937f3c6f37030e4ca59532eba7ec89e781c8aa3

  • SHA256

    6fc9b1a9cf410f38cb75c2c7e02694abf76b7a3b594663ee912db580d4c29a17

  • SHA512

    f627f0b4e70bc7e7ea8f8e0a53367d0d58eed5dbd026ccf8736c315f897cdb0661fcf8700529d7515fd7f6a06fdb9e5c7d6fcd316f6eb5a3ce2e0f92bc6fb88d

  • SSDEEP

    6144:K6y+bnr+Np0yN90QEprKEP3ve7yRfsK6KRFjEXtaBv7T8KgxW94sMk:yMrhy90/KU/e7RK6KRdEXYp7I7xW94Jk

  Score

  10^/10

  amadeypersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2