Extracted

• • Target

    d3f6c5bce75849e28da0d6db91ced261a89f52b2089bd2c5763c518295fb10ba

  • Size

    256KB

  • MD5

    75ce5a0540646147e4cc0fc60a344087

  • SHA1

    42ef6796ece99a17509a1ae32e541576b707764b

  • SHA256

    d3f6c5bce75849e28da0d6db91ced261a89f52b2089bd2c5763c518295fb10ba

  • SHA512

    76fe91fa812e871db0eae8fe7d38f0ab01124141a1e0dc4e502af0b642b1a6d4bc776d42c79e28a66ea8ecc2fe26aee90367a94c2a8368fd9b4d7366efc8e83a

  • SSDEEP

    3072:Idg2WfgUqxS+dWIMOfdMsdmAYTH/lrsI3tbpxFTY5n5hwYPDpJKJRf8:8btUstdWROAOI9bpxZGQYPDWJ

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2