Extracted

• • Target

    1c5b35952354a21126d2dc336bdb40e3de5084040fa734ccb1d890527fefc40a.exe

  • Size

    367KB

  • MD5

    944be4b62367cb1ebba80569085df840

  • SHA1

    31464bc2b9ba15cfc27975bfdcc89fbc947779a6

  • SHA256

    1c5b35952354a21126d2dc336bdb40e3de5084040fa734ccb1d890527fefc40a

  • SHA512

    f00bb182d01ad46d82f2ec562111f1d36285c9c85cc08ad5893bb28f7edda9f3fdb5029a1d6f311157b1e508602065d5d9549b79afd2098810a777210979854b

  • SSDEEP

    3072:oM+QXwgl9vHPbhy6VYnH88eY/8Fcy5iThp+vbeNNGPcbYq/NFPYNwPFcq+bERhVp:ojQXLP9PG1/S5KxNG81NFYqqq2EbzRv

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2