Extracted

• • Target

    244e9b1b690910814a340721b2ae9b6d10104a358de11b6bf41a674b009dacfb

  • Size

    512KB

  • MD5

    7be1c71c0bae58fdd6ba317589aeecd1

  • SHA1

    85dfc21272447f19934289b251c602d31acab1ad

  • SHA256

    244e9b1b690910814a340721b2ae9b6d10104a358de11b6bf41a674b009dacfb

  • SHA512

    370133b84a8a144931b9f2d1674cb6ef67235506700408ee40356a34b572937dfc10ec545a33725dd8a5c6fb07de4af63b0dc3cce7f004d3c7b9cf4e4a260d6e

  • SSDEEP

    6144:dzLWTWb0M4lrjDfHuuzPg5m5UmCN2Ve47dhs98WaNGPitgst6DsOFJeI:ZKTC0MgbHlgE5ON2A48haNGKtf6lF

  Score

  10^/10

  amadey8fc809trojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2