Extracted

• • Target

    231db53854313bd065e5fb0460773cefeeb96de961c898633f226aa476667ff1N.exe

  • Size

    256KB

  • MD5

    5acc71e7b9b07c2187feef51c0628770

  • SHA1

    dfd5f77526133110fd78935b837dccf887bfb948

  • SHA256

    231db53854313bd065e5fb0460773cefeeb96de961c898633f226aa476667ff1

  • SHA512

    55c7cec865651171126440c4dd718155abab6cba034a1512b555f478b68a388e8562525fdf4fbfda1729589b46f70fa457e33debe760aee2ef2d82d9b0c1fec8

  • SSDEEP

    3072:wdg2WfgUqxS+dWIMOfdMsdmAYTH/lrsI3tbpxFTY5n5hwYPDpJKJRf8:kbtUstdWROAOI9bpxZGQYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2