Extracted

• • Target

    c02b68d6ca98fb13833f7f369ace97c520ae029d9b76d21e56eebc319d565740.exe

  • Size

    376KB

  • MD5

    4459793cafbcbdd2c6a28ae945a862f1

  • SHA1

    f519583331ca44dec197efdb44aeacc9d1e6746e

  • SHA256

    c02b68d6ca98fb13833f7f369ace97c520ae029d9b76d21e56eebc319d565740

  • SHA512

    d51c00ae7320c6a4997eb8e1be47736fa4ae681ca743511357bd9f57eb21df66afbb351f9d4b8a09d0c2c35ca726aeeafbec62cbf1b826eda250edd111c825cb

  • SSDEEP

    6144:yhHsaHFCRV7cNBhQU1A4QukID8DiR7aQFuw:yhHxHFCRtU2QA4QpID3JFJ

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2