Extracted

• • Target

    942b5b45c76d896590c0e5ff555fbd741879526ba024ef4ddd1a54f628090674.exe

  • Size

    204KB

  • MD5

    d11bba158cca8751ef2e95a8a555a355

  • SHA1

    2d4ea2d13d083d1072d6715fae0089388034fb2a

  • SHA256

    942b5b45c76d896590c0e5ff555fbd741879526ba024ef4ddd1a54f628090674

  • SHA512

    1dc885ce46d27dd45d185ca04602fd8bffe30806d21b817862abc85e1f0634c2bab0f3a4cf1b735ca698ab26eb56627148ed1fa0af4900b19f7d76c67aaed86f

  • SSDEEP

    3072:c/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXzeJX2vkMfSDPwU/:Wfrnzurs3Czpexj2kGOIu5QTyJMKkG

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2