Extracted

• • Target

    ee3d7893f18fddee62ed4f2ddcfce045ac49f277e04702ece3bed63f42068f23N.exe

  • Size

    204KB

  • MD5

    52e2b4b73b6aae15dda11b813dcb42b0

  • SHA1

    d65bae062cda551497861d7c3df365b5a50135d6

  • SHA256

    ee3d7893f18fddee62ed4f2ddcfce045ac49f277e04702ece3bed63f42068f23

  • SHA512

    0486c9c8313b3f3c4095a4f6af06fdf6e696d755a5de59241bf27c4b1984a58771f09086f58f8e467e71f05f51f70405f250e760af71d2588e2ad5a141ff4994

  • SSDEEP

    3072:c/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXzeJX2vkMfSDPwU:Wfrnzurs3Czpexj2kGOIu5QTyJMKk

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2