Extracted

• • Target

    2bca982e0e5b82440ccd17351d5cd916a9b769bcc0fb9df3f1163ce2ab9850e1

  • Size

    382KB

  • MD5

    b2d2a10399b902efbd4c02cf2b2eac34

  • SHA1

    13b8e3acf1ef3f549cb8c5d236edb050234006a7

  • SHA256

    2bca982e0e5b82440ccd17351d5cd916a9b769bcc0fb9df3f1163ce2ab9850e1

  • SHA512

    d5637a611bfd49cbd9eaab6f31cea0cd26c011c5c5ae7328b251df8c1455da8f7a61163f716e3bf6336c930d6452bbdbd074ede9b6a58c027e0f548bbde9419a

  • SSDEEP

    6144:a/F0Z2tsmgQT+z9ZQvBymELE4JlKZGp0LQh4U6o3T:UFM2ts5yBwE6KpE7D

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2