Extracted

• • Target

    19d3bf22d7f894a250edc38ddbaf35aa8dac2547408657609bbd85ea6e0d6022N.exe

  • Size

    256KB

  • MD5

    9ddadde03c8bd513386e0421dec03490

  • SHA1

    8a351f091ba708c69a5fc29d06e1c9860c449fa9

  • SHA256

    19d3bf22d7f894a250edc38ddbaf35aa8dac2547408657609bbd85ea6e0d6022

  • SHA512

    8298547423b443877a68e089cbab1924ac4938127b8894c042ac7f85c8d17c2c181167884b38c20e18a6d599722d5f6f5db017df9d3eb27c1e3a3cd5c311bf0e

  • SSDEEP

    3072:uX5YwxA0Dxx5TscWERNMtiAncRWhJX2NGx93PQUT2964GKsR5bEXhlBjk4/owe:upYJCx5g8MtiWYN89W8UcEXhfg4/ve

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2