Extracted

• • Target

    7ebca3b640bd7fa7b24a85e1491d1012916c43429f4aeb97bade134e23c45719.exe

  • Size

    384KB

  • MD5

    d0d36f4813ce99e671194e99fa8641c0

  • SHA1

    684a36cfbee313ddf12b74fe19916d30b75680b6

  • SHA256

    7ebca3b640bd7fa7b24a85e1491d1012916c43429f4aeb97bade134e23c45719

  • SHA512

    6c4c36605189260f333eca9a35a7c4deb64dfddc1aa96a433c631f029bbf1ed807a56936c3f4573edff901d01ac0fafc016d7834aae0a080363dba69132b4e58

  • SSDEEP

    6144:oNvjoTlyU49+3U9ANGiIVOQ7s4fORwA+8igp+1YXSTJPL:KvjMkUg+3U9uGL4gLbAxjIYiTBL

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2