Extracted

• • Target

    29e4fa23109149685f39531d97c1db3d6bea122d7a47c7c75e3978f217a586df

  • Size

    256KB

  • MD5

    58fbcba40a0ae54630b7cfc6994d656c

  • SHA1

    7fb9a37e67fcb02c08645deec67b9ab189e3cd72

  • SHA256

    29e4fa23109149685f39531d97c1db3d6bea122d7a47c7c75e3978f217a586df

  • SHA512

    a8d6ff453af84b3b5e6717e75b8dd533b9e7430d0cd93b1f6ebc66064854a5499023d1aa0d6e4307b7d91a8e138ee939ba99e1d59f0f2bf6771997dae8fa98af

  • SSDEEP

    3072:W4Ppg8jjdCb490LQMw429zz9IG59ypCXMyitcqlxv3MPRd5L3wYPDpJKJRfo:jPG4dCu0zw42d9Iw4wingAYPDWJG

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2