Extracted

• • Target

    42c3fe49323ed9d8bc580346ffe9e933aa914aa68e3aafb0381c23318b4ec9cb

  • Size

    256KB

  • MD5

    ce7792161d0e2e89a58dc419f516da32

  • SHA1

    06fb8ef3403dda50bb95f78204660300bb5e187e

  • SHA256

    42c3fe49323ed9d8bc580346ffe9e933aa914aa68e3aafb0381c23318b4ec9cb

  • SHA512

    b4aaecd5020d01b32ea86ea6a2e0ccf1db2b1b1c0a46d68ba499fe932c15a81acb3d8290be516d6041167533b5e411ed58714ea898059b520bfad632648843e2

  • SSDEEP

    3072:3dg2WfgUqxS+dWIMOfdMsdmAYTH/lrsI3tbpxFTY5n5hwYPDpJKJRf8:NbtUstdWROAOI9bpxZGQYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2