Extracted

• • Target

    NEAS.eb4f61cdbba43d2b9b567e06a981f760.exe

  • Size

    243KB

  • MD5

    eb4f61cdbba43d2b9b567e06a981f760

  • SHA1

    b9738f36b4fb5451fa28cc23f0eff794d7b6b647

  • SHA256

    27a59b0d52380734f65d86eec8562d206300e3b64500017ba0157a17bd458359

  • SHA512

    433473687f20b4c6de30e3f43625419c3c02fa4ee39989b599ffee3446ec2acf2f30ee94d375a55eb06ad0d8cb0ae06b6a5fe11e76f70d7a132d6b3ece23a4ca

  • SSDEEP

    6144:LEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:LE32xpoaxBFg1ugMeS

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2