Extracted

• • Target

    70251da0e5bd76498c67c25ee8c7bb0cb538080ccd3acf74acb7f6eae1af1119N.exe

  • Size

    376KB

  • MD5

    d0b636406ad2a70bc4fac633d8a022d0

  • SHA1

    f9ec412a5bcaec6e22c8c102c7eebf867cc6b045

  • SHA256

    70251da0e5bd76498c67c25ee8c7bb0cb538080ccd3acf74acb7f6eae1af1119

  • SHA512

    b471452ed6b244ae2907f585f91f54f68e0564032a07c14851872fe58d241e7340b825ec4eba085ecff95ca9c11241971fe4d8f24a1d1f4ee00216d11abbab33

  • SSDEEP

    6144:JhHsaHFCRV7cNBhQU1A4QukID8DiR7aQFu:JhHxHFCRtU2QA4QpID3JF

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2