Extracted

• • Target

    00160135cd4df69f9e9e7ea8c95ea4bf5f07785ec41a622087cad640b001c2f7.exe

  • Size

    277KB

  • MD5

    1d1abcd9508a2fbbf2e0334d60e70183

  • SHA1

    671c942a9ee52f8b6ccbded1945b3feccf624f30

  • SHA256

    00160135cd4df69f9e9e7ea8c95ea4bf5f07785ec41a622087cad640b001c2f7

  • SHA512

    1d4919e280cff8d2fa94169a8f6dee2f65130456da162ef27833f122a10f6b4841470191e9753b5aafd50ef5d7fb90f83c3968637a200674dba32fdf5765587e

  • SSDEEP

    3072:uSajbT5EbvRFGom1OHmU5k0oYaYmvuLhyK535irPFhZOpVn:XajbTqGnmJ5k0oYfBLhJ5cYpR

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2