Extracted

• • Target

    27263008f674083d9b76bfa572103a5c5cfeaac82375ff1b2014903ab42aee8d.exe

  • Size

    479KB

  • MD5

    75c1b653f733ae5c4ab3c1654225eed7

  • SHA1

    5ef25cc5fd701cb10cc94dde2fe8fdb06a3892bf

  • SHA256

    27263008f674083d9b76bfa572103a5c5cfeaac82375ff1b2014903ab42aee8d

  • SHA512

    59b04bdd8e770ae11fa700b1f7e4c9e32a47bd438cdbe1179151df5675be24941a0fc63db6b93f67dabaf7e278e3f1e00b965d880921f18f164d61edb96ca412

  • SSDEEP

    6144:MhDtFk4NeB9BPlldSJM3qTowxi+fJFZRIEEzDeTfFb4T:4tFk4NobdSyqfrFGzDeT6

  Score

  10^/10

  amadeyb2c2c1trojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2