Extracted

• • Target

    20230ca1be11f6b42e850e499b77f076796427c98609e76e6413c085bdb1b4d5.exe

  • Size

    256KB

  • MD5

    e71f39dccfae9ef4c88435d83f79d457

  • SHA1

    7cc9358c0a2c9d1225149b6bc313d041cbd73b6c

  • SHA256

    20230ca1be11f6b42e850e499b77f076796427c98609e76e6413c085bdb1b4d5

  • SHA512

    4bc0ab0836ee24ab000b36f0ec7884bfb6d30a2d1f82bde4bf44919c4eddfb1a43e8ced83c8c36747d99254715785f94cb231e07f01f0bde43cc410f46e4ddc2

  • SSDEEP

    3072:R/MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyIz:VaJSvMjwjwDw8MqYPDWJd

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2