Extracted

• • Target

    9accad21b56c8203721abd6bd80c9cddb70759ba4581c270dd6a1f064ee9df67.exe

  • Size

    367KB

  • MD5

    345d32a43a2adae9f81003dda4f9bcb1

  • SHA1

    ad6ef9aeb0f1c850e55b9c0de472f821b33d71e2

  • SHA256

    9accad21b56c8203721abd6bd80c9cddb70759ba4581c270dd6a1f064ee9df67

  • SHA512

    6f6ee7e83f21ccc8954cbc8515d62eec11c75e5564b9b3e449c6766cb25521246a1a5783ae0a532960efd63ace9f1eaf71c33077b74e4d66ec889beb51086662

  • SSDEEP

    3072:os+QXwgl9vHPbhy6VYnH88eY/8Fcy5iThp+vbeNNGPcbYq/NFPYNwPFcq+bERhV7:oDQXLP9PG1/S5KxNG81NFYqqq2EbzRN

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2