Extracted

• • Target

    d153e610b0dab3037ea806878400e0659e6788909dbd651012c58c4c5e7e775a.exe

  • Size

    256KB

  • MD5

    16d2a93278c6701add1aa5007953c90d

  • SHA1

    4d66d8d34617114cdc002a43edcde0deaff6b128

  • SHA256

    d153e610b0dab3037ea806878400e0659e6788909dbd651012c58c4c5e7e775a

  • SHA512

    2d8b34cfdd687cdede443ee133fc5dfe1d56280498b6cb3b2f0c3718665eef7943b51386d5b976327ced85f3f9e0917a8e36360f88a7573ba7ec5da3008f74a1

  • SSDEEP

    3072:uX5YwxA0Dxx5TscWERNMtiAncRWhJX2NGx93PQUT2964GKsR5bEXhlBjk4/owe1:upYJCx5g8MtiWYN89W8UcEXhfg4/ve1

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2