Extracted

• • Target

    2b383433a7a9874e36d4a208e9c95fcfe43b414da44ca049f5e9f9b95fad7715N.exe

  • Size

    256KB

  • MD5

    31689a073fdfc49b57fc1f9775110490

  • SHA1

    6b996fefd486e401675f6bab177377367d06d9b4

  • SHA256

    2b383433a7a9874e36d4a208e9c95fcfe43b414da44ca049f5e9f9b95fad7715

  • SHA512

    de4b5e61bc1e09d531099d1ead86986fcd37344b9e9a471df83dfb71b9bbd75b0276ce3bef3c6f3114425b7d3d546158204b110b9407e4314db93a3c9b1905bf

  • SSDEEP

    3072:iX5YwxA0Dxx5TscWERNMtiAncRWhJX2NGx93PQUT2964GKsR5bEXhlBjk4/owe:ipYJCx5g8MtiWYN89W8UcEXhfg4/ve

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2