Extracted

• • Target

    b58e34b07e1fdce5e7143860bb0d52e5d9b865de5c4929f648c5bd8f5a62fe6dN.exe

  • Size

    256KB

  • MD5

    2f7debab43b9db74bbd60708f155ef40

  • SHA1

    a75296eba09028bced052ebc6a3416c9b7679649

  • SHA256

    b58e34b07e1fdce5e7143860bb0d52e5d9b865de5c4929f648c5bd8f5a62fe6d

  • SHA512

    1bc150cea98724e61c9e52f001225c9bb559b935b89d53176bccb5043646314595895c72cdbe756a605048ded2344b5f17e07f350ea4f5e6dee21c2a193b2050

  • SSDEEP

    3072:w7BLpftyof4L1K8vg76p6iNNmtTnIirsuf2ESts5f0eltTuwYPDpJKJRfu/:6FOlIxSNYIkeltqdltTYPDWJk

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2