Extracted

• • Target

    0x000600000001680a-52.dat

  • Size

    330KB

  • MD5

    db14bfcc5900e14fdee411b445e82121

  • SHA1

    8291e6a03ea20bf246b6f0527984a57abc598c0f

  • SHA256

    6a3d9ea12588b3ccd1ef8d56b6d24328f3c20c48e53fb87d2e248717cc10deb6

  • SHA512

    518300b4e36bcfe515bab00d8009eddd682ce529c514d49a1fa5581ed143d48b1a469ca37168999556a022d80cfe7a104fdb065641f3c9c83da2a97e8804ebfc

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2