Extracted

• • Target

    c91c6d8e93ba56cf0398a409f6c7d3bc599afd4a977a55f7dc682bebdffa8149

  • Size

    490KB

  • MD5

    aa105c47c9f55f1333551c42a1a8f82a

  • SHA1

    e7aaf771310ba0d44ff6dad1fdbffc274e35e0af

  • SHA256

    c91c6d8e93ba56cf0398a409f6c7d3bc599afd4a977a55f7dc682bebdffa8149

  • SHA512

    b161c6407a69f074310f2af1760150beceac281e12536e6eb43dfb429876022292ae704b24469de3feb05c7888c0d329df724f16488252a0f1835db92ccf29f6

  • SSDEEP

    6144:x2bLFjBLhbyak4ojdAPCFICEZJzLxfS1SZ+JAdC0qd8VePUTgY4cXc6:CRjBFjojIZdZJzI1jAA0qd8o8Tgz

  Score

  10^/10

  amadey8fc809trojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2