Extracted

• • Target

    2a3ba2217f8003eb20838f59e5312aea6cb3d520b65e29e36b27f6a19b438850

  • Size

    465KB

  • MD5

    422e0b8f29c28f52836d6c6d73c97066

  • SHA1

    3c5a4300122ebb40e3f9de2a393dbdbb3238956b

  • SHA256

    2a3ba2217f8003eb20838f59e5312aea6cb3d520b65e29e36b27f6a19b438850

  • SHA512

    7083ecdb9537e1c5d8838b9047bebdbc69390329583f99492db949089a320114fc25b48ee77e474ecf7fbbd4613940949c0092d14fd829368a07c7a968700aa2

  • SSDEEP

    6144:hWw6nJViV/qYkHOXPbTSXuSNGevcsScJYL3FAavvK41T3Ge/WIOubT2:YfJViV+APK0evlScJYL3FAavvlN1W/8

  Score

  10^/10

  amadey9a3efctrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2