Extracted

• • Target

    d77d98c44de20a486ad85056f676dc319bbeccc695fe6189381d06c5cb48765aN.exe

  • Size

    256KB

  • MD5

    b921618a0879a4f984a3f69d2308d3e0

  • SHA1

    ea6567157a8282ce8cb4f8505fb3824f958835fb

  • SHA256

    d77d98c44de20a486ad85056f676dc319bbeccc695fe6189381d06c5cb48765a

  • SHA512

    8913a350009ffd97555c4f11a197ddde0e7fef262c62d7335641a85d51e59d98abb619bd0724aa18b8f6fe3ece5d2d120a9bf5c77c91bc9ba77375039be747c9

  • SSDEEP

    3072:l/MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyI:paJSvMjwjwDw8MqYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2