Extracted

• • Target

    c5a88f223132c9a106c62720333c273d5fd797aeef5ebcb52760aea5fec7c98e

  • Size

    256KB

  • MD5

    a0563c480327e9deba706991af1deb10

  • SHA1

    ab2f0760b63716e9049ca9daebfca0be56bc4314

  • SHA256

    c5a88f223132c9a106c62720333c273d5fd797aeef5ebcb52760aea5fec7c98e

  • SHA512

    18581f211daf6e037576f491cd1897d00dec1d883bef03507a3ace4a9b291ea591500176718baab98b13aa6314aa0894a05e80d70f83021e2b04ee2203dc4e41

  • SSDEEP

    6144:fZkFRbXfb7wzY1FJRRBx5oUsWW5W8g4/ve7:fZcpXGY1FJRTtsWWj

  Score

  10^/10

  amadey8c4642discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2