Extracted

• • Target

    669b438f9778686e6d63983975c19f9bd3f4074c9b2d46c9a7f5ccbd0cdd4876.exe

  • Size

    213KB

  • MD5

    2e78f019e1cc678c78a21f6a98700b46

  • SHA1

    38bb25b847dfdae50b1f358240370dce6029f03d

  • SHA256

    669b438f9778686e6d63983975c19f9bd3f4074c9b2d46c9a7f5ccbd0cdd4876

  • SHA512

    d5e1838f9b71479981a198a49e4b03f69b40221816185b7e09092a3192de1a3acd1e1304a46d93c4e1b82d67dadb693e6edb30782abad1c4c3a7345f148bbc51

  • SSDEEP

    3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmhH:5Cswq+AXYu7HGOSuZAlAILjqH

  Score

  10^/10

  amadeyf9a925discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2