Extracted

• • Target

    c8611c2cb9ee1e471c8a1cd19dce2cd132cb35c0896e46748da6fb9253f86112.exe

  • Size

    256KB

  • MD5

    6baf550e0ccc109fe5b0fd3aa12fb885

  • SHA1

    50d735c646bc2c4a7ae0df04f8ba4065279f5962

  • SHA256

    c8611c2cb9ee1e471c8a1cd19dce2cd132cb35c0896e46748da6fb9253f86112

  • SHA512

    5b0fcb6eb18df7ad12e507a97aa3f0228187dc02984a8e3ee3aa2285f65844f477150d94f18a3fd5d4e161b15e9010be47a31c19893cf6ccac47d98bab9e3a88

  • SSDEEP

    3072:t/MnwnqSiQunb5x8BAG8nweqXnzIL6qvUsbqC6N25/jAtwYPDpJKJRfyID:BaJSvMjwjwDw8MqYPDWJN

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2