Extracted

• • Target

    e8311959aa67657aa9ca9c58c54d83327cf05bb7f1b4d0911e3e72bae1b18421N.exe

  • Size

    277KB

  • MD5

    4bf137e4d3e0423c58f12911777e5f50

  • SHA1

    e21433ed125eca754ed822f2f0970a776178b872

  • SHA256

    e8311959aa67657aa9ca9c58c54d83327cf05bb7f1b4d0911e3e72bae1b18421

  • SHA512

    a3142f51aa153105381630d7987a7c2709e8c2d0c3d52243c58806b5f87ea250b605f90e65f0d23c355d07e626ead848330e2a22abc2f69c10050a779f77327a

  • SSDEEP

    3072:uSajbT5EbvRFGom1OHmU5k0oYaYmvuLhyK535irPFhZOpV:XajbTqGnmJ5k0oYfBLhJ5cYp

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2