Extracted

• • Target

    y4319932.exe

  • Size

    319KB

  • MD5

    dc1dbfb64196b1e96eab343bfa921662

  • SHA1

    d11b1a478343d4d897c35ba303ec40bcda3fb5b2

  • SHA256

    a2db76e7be23b5d22650343744feca884e24178430caf653fce67b0cf46076cc

  • SHA512

    751e57980d56e65609cb1a915cfc66c5800bc85b7d86d1c7209c8ffe290156120867a4fa81b29b83917bfd9a7c859215625ed354f7870cf73aae97d1cf0e881f

  • SSDEEP

    6144:Kxy+bnr+Np0yN90QEwrKEP3ve7yRfsK6KRFjEXtaBv745ONZD8DrC:3Mr9y906KU/e7RK6KRdEXYp72WZD8DW

  Score

  10^/10

  amadeypersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2