Extracted

• • Target

    y2670470.exe

  • Size

    319KB

  • MD5

    d6b367743dfeade6a252ed6a641bf673

  • SHA1

    5f72f1f2c3f95bf9377440a199ec02ca3b1c6ab5

  • SHA256

    7ddc41a8926510fc3298b4deb9f473cf2a2dbb7caa89f914f1bcab8046511de1

  • SHA512

    f8ad09b51bd7bff97a36ef9f40d743b37ddd8f0d60356b31aa2c760b79cd0db6f20ca810eb80bbde7c1c9875a01b5a3ea73f7100f2a1926030f1a39cc42586f8

  • SSDEEP

    6144:K2y+bnr+lp0yN90QEJrKEP3ve7yRfsK6KRFjEXtaBv7tgagBNniLqGVyyg:OMrZy907KU/e7RK6KRdEXYp7kTuy3

  Score

  10^/10

  amadeypersistencetrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2