Extracted

• • Target

    775f1ea2afdc4a8d9944ed7523257edcd4487aaf443c92848b39614b30f310a8N.exe

  • Size

    256KB

  • MD5

    cfe5ed118de0a77354eb9d32dea630f0

  • SHA1

    747526790e5a9e725d7eeaf67a6b2189ad3447d9

  • SHA256

    775f1ea2afdc4a8d9944ed7523257edcd4487aaf443c92848b39614b30f310a8

  • SHA512

    179ba6613b627512475a301a74962d65628bbe00e8bc26bd3eb24d2c32032aa2951e19859ed02087d0717aad7acfe4dab04a15bb2509f58d04910287cde03410

  • SSDEEP

    6144:YZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7:YZcpXGY1FJRTtsWWj

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2