Extracted

• • Target

    d7e528b55b2eeb6786509664a70f641f14d0c13ceec539737eef26857355536e.ps1

  • Size

    583KB

  • MD5

    123cdee8a31e52577191351fae7b53ef

  • SHA1

    e8e645d8844b9a19012238be6ab2c4149d62f1cf

  • SHA256

    d7e528b55b2eeb6786509664a70f641f14d0c13ceec539737eef26857355536e

  • SHA512

    3ff792ced5090f68b7d6004213a9e6c653b42bcf5f10416b3b0cccf1a31516d5e737705d9826d21c8c84f240fc34726c76c60ec5fc8994f30a8e81839bee913a

  • SSDEEP

    12288:kl6RA0zJb58097MFZ0sjlTONreknQV8Xie/0+4NW:kYRASw90sjtONrQV984NW

  Score

  10^/10

  executionamadey1cc3fediscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2