Extracted

• • Target

    0x0006000000015ef9-80.dat

  • Size

    335KB

  • MD5

    762434998b43c23827341ffa3fe3afe5

  • SHA1

    9b9a5074ad2184e7ca5cb5dec87b651dd9f2ace2

  • SHA256

    94cd0b10c1b09146e3a7413d6f5499b6fdbaa0d112fbaaa535204b7e3da344c2

  • SHA512

    ec7dff3e7da322baedfe0598249fb5c96bd4ba3634c0a5cfcad1f889769f969ae3cc637084003678500e656699f48f635c6df286cf2452d920b16f74b7302678

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2