Extracted

• • Target

    1ce506ce58584a33966bf28c71c18e2acd7d5d5e2fc7e980456c753c7ac0e5f3N.exe

  • Size

    384KB

  • MD5

    9137f9d8ce642705e5dc6959c9055cc0

  • SHA1

    afce9d7a696a15f176386af2f5a3c2b638c01b9e

  • SHA256

    1ce506ce58584a33966bf28c71c18e2acd7d5d5e2fc7e980456c753c7ac0e5f3

  • SHA512

    e5f753a91ddb40ae77df8bed01a19a2ff1bbd5e3339c5b83eeff302b46b94947c1ceebe2472c7fc4aaab83d8e1233027da43532f16bbfc9921794919d714919b

  • SSDEEP

    6144:oDQ3brLY+ukCbXUl946oNyFhegHXYK5fQ2T+:8Q3/k+nCbXUH4dyFhegHI4T+

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2