Extracted

• • Target

    0x0007000000016d14-34.dat

  • Size

    330KB

  • MD5

    18f636342d16f7ab4fb4f47445b1bbf1

  • SHA1

    795885e3524521f5fd3fc3ea1088639fb7433557

  • SHA256

    5ce0820139462ff012965fd14db718b8acd356a77b00354203fb746c2254518b

  • SHA512

    01f01919632898620205a3466c2d727957c70f56089c07d693a7e4f05c6c9be9374a82e54675422aea94aebb6a8071faf7c6bde814319a8d819ea9c9562016a6

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2