Extracted

• • Target

    NEAS.50ef265d6a090330421895101039b8d0.exe

  • Size

    244KB

  • MD5

    50ef265d6a090330421895101039b8d0

  • SHA1

    cf40b1438c3d78ecae4234463ebf6d759dbbcd15

  • SHA256

    6f5d7cd07524c24098435505a46ead93ca25c1a1c0d9dd8a5c1d9e56fd3d2bea

  • SHA512

    c5791424e5b9d2bb326c32a279142770f7c58508e61405aeaf33fe5752c60cec58b410c799d0759a14df0127d64845a3b6786dce76c442a87109a250e31b24d3

  • SSDEEP

    6144:LEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:LE32xpoaxBFg1ugMeS

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2