Extracted

• • Target

    494567b857485c5a4843778e180d1369966aba94faf995c8b9a44816c697912cN.exe

  • Size

    256KB

  • MD5

    70b82caca700126247ef5df4c3bc7600

  • SHA1

    3ff3fa1fd02aa9ba66deb8b8664367690db4e637

  • SHA256

    494567b857485c5a4843778e180d1369966aba94faf995c8b9a44816c697912c

  • SHA512

    3c07e70368d48eed22ca9e1481fecc4b4f790bdff865a96988031ddbad14433633471224c8a8081ce4ca7dcc86eefeaad85f234fdec714683151304deb764c18

  • SSDEEP

    3072:R/MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyI:VaJSvMjwjwDw8MqYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2