Extracted

• • Target

    985c7a62468a259da64566006003ee5f09c68701af736e2497901acd9c3a254e

  • Size

    440KB

  • MD5

    7975c6314618a21c1280b28a7db82e9a

  • SHA1

    2134904558aa14a68e73f177401baac2151263de

  • SHA256

    985c7a62468a259da64566006003ee5f09c68701af736e2497901acd9c3a254e

  • SHA512

    da4b23b5629f3a3b99cb20a361d6d32e39af2e47d78a98380534da5906d79a2e90a72420ef97c5c6cc81c45e6dd052157104f1a23d7d8effe90658c4587267db

  • SSDEEP

    12288:4mOuV0e8bMOS1M5PzeLbiA1C3bGHmUayGpC:pSHndaEaSpC

  Score

  10^/10

  amadey9a3efctrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2