Extracted

• • Target

    746a66e15ea48584716ae6619bf151b2a6c058d07de1f55b2372ebb4009d8fe5

  • Size

    256KB

  • MD5

    d7c0dfc221c68d233462952792bf68cc

  • SHA1

    387432e9d97d3c63f026aedac1b17482a060adca

  • SHA256

    746a66e15ea48584716ae6619bf151b2a6c058d07de1f55b2372ebb4009d8fe5

  • SHA512

    527bd3827059357578286cf3b40b5fada2493fdb09a5041138ee961185cf0436cbc59fcd2bbfd0d80b9e71c527ea1dbe4df583cc7c79906ef2f918d0b4614619

  • SSDEEP

    6144:pWepsHGT+mbMuZPzkC30xG/Yjnh3wxBZYPDWJ:p1p/T+mbMuBaxG2A

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2