Extracted

• • Target

    1baf745d7f9b6e10c29aafeea88cbf9e82633653f705fe73aa467b58be364b15

  • Size

    256KB

  • MD5

    06878937e42ae27794ea76bcf1a97358

  • SHA1

    edf688f31a667a0df086c46a6b61588da9564599

  • SHA256

    1baf745d7f9b6e10c29aafeea88cbf9e82633653f705fe73aa467b58be364b15

  • SHA512

    be8adc9e9b795a601f2a3c2ad385af4e5dec01978fde75605e418336cc24c87e09d8a3687b955e94aaf129730b1bccb0921308066cc4b04875d2d796c349663b

  • SSDEEP

    6144:hZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7:hZcpXGY1FJRTtsWWj

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2