Extracted

• • Target

    d39074a7521fa0b848eeaa0b352e7c8cb222c70ed7d5c4907038ed6a660969ea

  • Size

    255KB

  • MD5

    161e769a19d05465eef62a48fa31982e

  • SHA1

    b5c0dcb600b8387d6412d25dd6d222c89debfe8b

  • SHA256

    d39074a7521fa0b848eeaa0b352e7c8cb222c70ed7d5c4907038ed6a660969ea

  • SHA512

    033074450cf6706eb7969e85696fd2e3468a020fae35644f55bb5df6b7bbb9abe8b6932c5967aee263c20a6d4e5fe2b55f6db89b7cacf6108e4351da3dfe6df4

  • SSDEEP

    3072:Woq86TzW4pT3MVD1OtqQjJouL7ukm5rvuFwYPDpJKJRf:Tq7+qTIDwtq0JozLvuSYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2