Extracted

• • Target

    0x0005000000018fb752_JC.dat

  • Size

    330KB

  • MD5

    6ab65ce2eefd11b767c17d6f48058b26

  • SHA1

    66a77a05c9d6fda30e9976abaefe243477af2de5

  • SHA256

    1ef35de830d9bb1dd455bc25b87f98e5b879b91b25ab89a4b5b1339d4a6a6caf

  • SHA512

    edab03d24619688a06ed082817755fe1726e46e085943ce836cc446159410e180a463e7c0ea7f912255da6002e0594d30cde52aa84397551ae186883c8dc077a

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2