Extracted

• • Target

    78c7d1ebb14166ecbfda80c426f6a814628ecf9c9dbf7f599dc4fb5efa187ea8.exe

  • Size

    256KB

  • MD5

    8f0e0ac73cd7f1b8058372d714cd68da

  • SHA1

    ec79e3da7f0c263437f18001343d6a1043914fb7

  • SHA256

    78c7d1ebb14166ecbfda80c426f6a814628ecf9c9dbf7f599dc4fb5efa187ea8

  • SHA512

    39c22ddb7462a2c0a114c6e8ffbe5fbfaf8a77699a82574bd0cebf01f417b3bb5c6c96e889f94e641d7976905f7fd9e54bd7138c56225313751c2834ca233442

  • SSDEEP

    3072:Z/MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyIL:NaJSvMjwjwDw8MqYPDWJF

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2