Extracted

• • Target

    c3ebfddf9e19c430535564d03c68b2bfbc4b24591539f0f6a27f6a954bcf51cf.exe

  • Size

    1.0MB

  • MD5

    0ef38dbc5d7d1d22974c3d4d3a201467

  • SHA1

    60217cdeee89ba6129b367ef7b17f113438d86b9

  • SHA256

    c3ebfddf9e19c430535564d03c68b2bfbc4b24591539f0f6a27f6a954bcf51cf

  • SHA512

    cba0a9bebb9215d901ffb306f402a83b7fa03da5deed4bd45a326b440b026cab9bcf4f30bb02cf485bc427bbb9077aa56ce516e9d03916eb0c9c9b42bd6eca2c

  • SSDEEP

    12288:RUaYxiov1kJQaAdVWlbQeep6tgUDs3thCa9abuLNihYS0UvHZrm:RUaLoNbHI9465YthCag+shGM

  Score

  10^/10

  amadey98844cdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2