Extracted

• • Target

    b6fcbd86a1369dc7f8a1ad178b8b7d80459b7e83599c998e54737dd2775a0452

  • Size

    256KB

  • MD5

    4749c90febdd1c0f1e225d27a227cf74

  • SHA1

    474322fc11ebec3ee9e671dfa0f51ab3d9689403

  • SHA256

    b6fcbd86a1369dc7f8a1ad178b8b7d80459b7e83599c998e54737dd2775a0452

  • SHA512

    95d56c0d5870532fffdb35910b7d1e15ead6c2dc6b9097961e528fb73314e031621296a6303aa22727c442cc1c7f867833a596f415ea00760be51025e04f2029

  • SSDEEP

    6144:SZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7:SZcpXGY1FJRTtsWWj

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2