Extracted

• • Target

    9bed971fdfce1955f44350eb68cf89e2bc406a4a48cb0eda66606fba70b3c95fN.exe

  • Size

    370KB

  • MD5

    f8fd5f898e93865d05b9a1f1fa4ebd80

  • SHA1

    98612f75f363ef5eeaa44bbc626f6d3f13c2ded0

  • SHA256

    9bed971fdfce1955f44350eb68cf89e2bc406a4a48cb0eda66606fba70b3c95f

  • SHA512

    4e15d148ed932b430b3d9ae61d80dc9a19988bdccc4038c86ebc829a9297493659d917ccae6a8f875f0d88e6bd99c9b4c0ad64702af82f448a3a24d6459850ba

  • SSDEEP

    6144:Cl/wSz9XIMjyTze/Wb5I0HtzvvdIKcsuR4ptBmRmcPMGaKHP7:CltR4M8zsiHhtInVR4pJc5P7

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2