Extracted

• • Target

    1c4c4235e143a6fdee6d5043810901d2123659a5b6f1c31836f542f869a7d73c.exe

  • Size

    384KB

  • MD5

    3b9cf7f48ce9895cd448536ff2972690

  • SHA1

    0563efacf23479df09ce7cad67c0cb20a151849c

  • SHA256

    1c4c4235e143a6fdee6d5043810901d2123659a5b6f1c31836f542f869a7d73c

  • SHA512

    68057908ea2be920ec78f4892f1a35943c0afcded4cdc8b7ea4e136c0fd836ff68ef4c7e4a59f6972436e68a0457f199971e11a649f586b8fa8ce62c8f8c0500

  • SSDEEP

    6144:oDQ3brLY+ukCbXUl946oNyFhegHXYK5fQ2T+O:8Q3/k+nCbXUH4dyFhegHI4T+O

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2