Extracted

• • Target

    d30d03acd9f0fc5fe83363a563b7086e292423cdd2c4d779ef15204d2257c704

  • Size

    256KB

  • MD5

    c204dbc019b53cbf998f525e910c6f6c

  • SHA1

    f30249c05670181a4e658320813f00874117e0cb

  • SHA256

    d30d03acd9f0fc5fe83363a563b7086e292423cdd2c4d779ef15204d2257c704

  • SHA512

    ae82e3fc0a8662822e38740ac13c5bd4810f944a531839c2128b08f2e5ca2dfd8e3077b5220695fa3850bab8541400f687f720b3dee266b6875aa175165043b0

  • SSDEEP

    3072:yX5YwxA0Dxx5TscWERNMtiAncRWhJX2NGx93PQUT2964GKsR5bEXhlBjk4/owe:ypYJCx5g8MtiWYN89W8UcEXhfg4/ve

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2