Extracted

• • Target

    1d62d51922329c3e197dbd410fa04176f13b970ab99638919abfbed41469efe6

  • Size

    383KB

  • MD5

    a036d6abc00cbf069af3dfc559ec997f

  • SHA1

    e1db1f70ccf5452999589d9f4fed490fa8865cf3

  • SHA256

    1d62d51922329c3e197dbd410fa04176f13b970ab99638919abfbed41469efe6

  • SHA512

    06f9009d435dc27ee72c27797d5df98b8de3b61600471663d54906e3cb478a849114b4d2b188438dd45794cadecb72eee31fe1d5306394fb93603120e95c8692

  • SSDEEP

    6144:3/AyOER4u8Lvj+9JNGoQGXZcnufnLPNJ5J1b59U9fBCmR:3/A5A4TLr+lG5wUqnLPn5Jt5aBb

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2