Extracted

• • Target

    fc332898ea9d95f664ec13270fbceefb8ad4900a3ac4a98a9dbf948722235db9.exe

  • Size

    213KB

  • MD5

    32e6b3672eab46ff84ef46c7f69de519

  • SHA1

    e64c15e987d9f46540cc79567e26d6572623a068

  • SHA256

    fc332898ea9d95f664ec13270fbceefb8ad4900a3ac4a98a9dbf948722235db9

  • SHA512

    ed4da348f9690c31db424c2ebc689a9c4d6784276a2bd7c314e937aee9ce91b48394dcaa7c0b3c277aa7533c31f709099732ad99e9a038a23b07435514584033

  • SSDEEP

    3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmhf:5Cswq+AXYu7HGOSuZAlAILjqf

  Score

  10^/10

  amadeyf9a925discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2