Extracted

• • Target

    84d0eee58258548404fcf81f61aeda35.exe

  • Size

    219KB

  • MD5

    84d0eee58258548404fcf81f61aeda35

  • SHA1

    3b75bd12fd3ea50dac34dde02956415dcb8fd396

  • SHA256

    bc66a70f527b72aeb7a37db5c32290a41f3b83d8c2b187a17a5cabd9076d2c91

  • SHA512

    4d94c4d42f059ce951f4095697ad5f0740eff51767ba998a4165c1c20caf6a24e33768c9da70a5862644626c3c244a58f08005d0344995683388f5402b6e81ce

  • SSDEEP

    6144:DEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:DE32xpoaxBFg1ugMeS

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2