Extracted

• • Target

    964b8248435c3698a24bff4fdce25543fdc2714a514ea6e8ec936d5e6bd7cfd9

  • Size

    393KB

  • MD5

    a207cc596a2378022f6ada3bfcc72305

  • SHA1

    abea18779a9d08dbc484a1dbef4f041a77f95556

  • SHA256

    964b8248435c3698a24bff4fdce25543fdc2714a514ea6e8ec936d5e6bd7cfd9

  • SHA512

    047360b2f20104536e894f2c0f3564c5c9c5955c486e7796bd13c24840656c0e19d1579147ed66717e420d4f064b042d981a16bace900e6f96ed2973e570f619

  • SSDEEP

    12288:K0Fkz2KXIhxNpRl8NFu0Y2jeHyKHWRFH:Voq/pRKNoKeVq

  Score

  10^/10

  amadeyb2c2c1trojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2