Extracted

• • Target

    a6008984e97e2336a4a267cd3c5cce17a67468c783f8ea9134081a260a02007d.exe

  • Size

    489KB

  • MD5

    640b35e62443a62ba15beba6aa317500

  • SHA1

    09bac93ca0e9e16cc840d22e45a7f14f54a0745c

  • SHA256

    a6008984e97e2336a4a267cd3c5cce17a67468c783f8ea9134081a260a02007d

  • SHA512

    0046cbe3974aa855c4746270873bb5976727f325606538f15e82c30f3a4225894840b8c2a853267780d99ecd83c5ee56120adae4d079f7683d9481a29bd6b10a

  • SSDEEP

    6144:Oc0LIpbZrTSoNGAtGMbJ/Po13iKoBcymNzUEpKRzCnuzZs9rxzkETgY4Tavc:r0spbZrTJGMdkRoBjVZCnuzZs9rZTgN

  Score

  10^/10

  amadey9a3efctrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2