Extracted

• • Target

    aabd256f0fc0ef60d86de38033977e26.exe

  • Size

    432KB

  • MD5

    aabd256f0fc0ef60d86de38033977e26

  • SHA1

    d34c9fd58704480c08cebcf62c6d0b2e16204224

  • SHA256

    83ba1a2e58efd33c3704178256b78a8cce40e83e994043aecf40523d41e7bd69

  • SHA512

    10575c8b31bd0e1ba75fa1a6626998e2e36789bebe0eea3072b4d6b901f02f9bbf3a16ac82cb62d318dfe8972ed54c4244eefc83352dd2fd3357c6bc2855f320

  • SSDEEP

    6144:SLxMUmSfDtQUwWlO6NQZFusJ79RSzDx6YOBSGdyJbvz352T:fUmO2e+ZFNZ90z8YOB/daDz35O

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2