Extracted

• • Target

    c534aca3cc4244dc3ae7bee791ee85ae.bin

  • Size

    482KB

  • MD5

    c534aca3cc4244dc3ae7bee791ee85ae

  • SHA1

    58dd83c3e3b5b88d51e7392a704a08b0eb2cdfd5

  • SHA256

    08e893cc397572a8f7d3871e0037027556acf986455fdace296d8d618b7a651a

  • SHA512

    16d631f6b16a0e26a6ee9446db7448eeb34a5de48f2d53fab0538a4daceb4266f4459e1629e26291cba5bac9d83d2c6d289ab628d535005a7bdf54a5d51698d1

  • SSDEEP

    12288:M+dGf/lHLV+p1wiywrLkvcbjv69D51DMCafSMV:ddUdkgQLkgK51DNaf

  Score

  10^/10

  amadeytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2