Extracted

• • Target

    addff231dabadf04b62011b1494a13e81b6171e1f566dbae1ee7afa56239dd57.exe

  • Size

    256KB

  • MD5

    3a15a9ffa2fa9c4b2814a7c0c450be1e

  • SHA1

    4eb3e39a74848a67bb1f6e195a6e1de8b55661e7

  • SHA256

    addff231dabadf04b62011b1494a13e81b6171e1f566dbae1ee7afa56239dd57

  • SHA512

    8302d89fae84cfc6201c4bbdf45bf27d85a5d90f124de8c91142af92b599e5cee51cbd37237544c2e67e9394e82427c76ea0a3df6df1c01d4611dd59767d3fb5

  • SSDEEP

    3072:f/MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyIh:naJSvMjwjwDw8MqYPDWJv

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2