Extracted

• • Target

    00e53a0babdd981ade99e6d924be1bffe115c6bfd7ecb7d91f75adc5ea218b7f.exe

  • Size

    256KB

  • MD5

    75c9ae7cc4ad65c61efe893e15e09bd3

  • SHA1

    36edd04b582482093c55bb7fab6cc214ca846891

  • SHA256

    00e53a0babdd981ade99e6d924be1bffe115c6bfd7ecb7d91f75adc5ea218b7f

  • SHA512

    041f5648d062e0d0682b1a310059ee9772d83c34987d15c78c2769980a586014566c3655c5ad0e7da9b21ec7f15852ecd806331d217c82870e86fe56a2fbd817

  • SSDEEP

    6144:YZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7l:YZcpXGY1FJRTtsWWjm

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2