Extracted

• • Target

    b743eaf6ad342cb220471e154312e43517118126a3975893ccf3aa9b417d5684

  • Size

    256KB

  • MD5

    ba066c39ca1482b02e5f9f335d899198

  • SHA1

    839f925526051f66ef29ad549d8dffde8d5c2461

  • SHA256

    b743eaf6ad342cb220471e154312e43517118126a3975893ccf3aa9b417d5684

  • SHA512

    9c56c1337234c81b27a9251d5d7df2916a50c4c8bfa13b925a4f96eea9ef505e70440378614e22dc690163cacedb3f04ce6a7cd3586e529a9103ef0317360e0e

  • SSDEEP

    3072://MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyI:HaJSvMjwjwDw8MqYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2