Extracted

• • Target

    a98a3bfa0515b252c98d8bedb85789865560d4ffa97d43b55f7f35ba7eef3328N.exe

  • Size

    206KB

  • MD5

    7c3384a0f2119a13a908d1ca08c8e590

  • SHA1

    e674dcbd1e38cf9a84b6a47bd9ca35ad9aa69efd

  • SHA256

    a98a3bfa0515b252c98d8bedb85789865560d4ffa97d43b55f7f35ba7eef3328

  • SHA512

    6290d8643c62de34858caa0f46ebacf40a1ca5a5fa78f0a40c5b93e835b384a58fdfaf422d8a335812a97528d9884a4a4e486b474d777e5d07d5753161e34fdf

  • SSDEEP

    3072:c/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXzeJX2vkMfSDPwU:Wfrnzurs3Czpexj2kGOIu5QTyJMKk

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2