Extracted

• • Target

    b0502d4829ff6c9a10b65732b5845a9e476ec54a96c130f0a75b0ff22602cf7dN.exe

  • Size

    256KB

  • MD5

    8eebffd5893e29143e0a7522b2a3c880

  • SHA1

    560dc5a27d0c18a29be56b32551a632e28ea9153

  • SHA256

    b0502d4829ff6c9a10b65732b5845a9e476ec54a96c130f0a75b0ff22602cf7d

  • SHA512

    3e077e8765ee5388a0ce7ff79579a45b2404874933f54559474ccc75d537ec1541a8d754fdec44ad9baf113df9c95448bd18c462c56a830be78684d6abcdb825

  • SSDEEP

    6144:DZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7:DZcpXGY1FJRTtsWWj

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2