Extracted

• • Target

    3c4771adf010c9b5e421647a45ece45543db0beff94789b2c02509e32342b67a

  • Size

    277KB

  • MD5

    ed172e4e544b1069ca4afd64285180eb

  • SHA1

    3066de9545d6dce148883ffd58101e8adaeaac03

  • SHA256

    3c4771adf010c9b5e421647a45ece45543db0beff94789b2c02509e32342b67a

  • SHA512

    3e1976d209d14337eb6b46ddf64e92b7c70b4c7aa16293e8122b6c5f602b07601af63d566b3b17526aece4d243f829475524462feddd4c203b05b00f0157205c

  • SSDEEP

    3072:cSajbT5EbvRFGom1OHmU5k0oYaYmvuLhyK535irPFhZOpV:lajbTqGnmJ5k0oYfBLhJ5cYp

  Score

  10^/10

  amadey9c0adbdiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2