Extracted

• • Target

    77ae5df4b3aadac2e28a2054e33758839957595b5348af572a3e6791f75292c3.exe

  • Size

    340KB

  • MD5

    c26a6e209c8866e8ff867a66692fd45a

  • SHA1

    f4544a094103d997e2e1048dee6385c8f54fbe8a

  • SHA256

    77ae5df4b3aadac2e28a2054e33758839957595b5348af572a3e6791f75292c3

  • SHA512

    244e3c2bd9b21ec687886cc28c25c93302085b0e8d5a2b068404b1d5a98201bfc947410957ae82643626b92952d9ad9d4bda703858066797c1986f6bcf70b2a3

  • SSDEEP

    6144:xvs09OWvaoya3lBVT9jZ9VMXE63fgPNx8ctnh:Js0sWvOavaXE6IFx8Wnh

  Score

  10^/10

  amadeyf9a925discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2