Extracted

• • Target

    1b688e21b8f04a453ece6bc7a6a2374c0ce5b4da1e259571d59c4c6d15b9f98d.exe

  • Size

    256KB

  • MD5

    b3ad16b5946755f8d5067573ada351d2

  • SHA1

    7bb82f765456020139a9e3da9d6dde9624efe2d8

  • SHA256

    1b688e21b8f04a453ece6bc7a6a2374c0ce5b4da1e259571d59c4c6d15b9f98d

  • SHA512

    99e2db1fd335a8d8690d75b03b3f88715694eeffb3cc5d144af9192126b1f5cdfc31a85d971476595796b1c91fa8378f20e2fd992d4947e6777f40ebf6d65f4c

  • SSDEEP

    6144:lWepsHGT+mbMuZPzkC30xG/Yjnh3wxBZYPDWJq:l1p/T+mbMuBaxG2AI

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2