Extracted

• • Target

    34156c23ded10df5fbb61511b968e6cd.exe

  • Size

    12.1MB

  • MD5

    34156c23ded10df5fbb61511b968e6cd

  • SHA1

    17271001393b53ff7d605a8925086d68101a0f15

  • SHA256

    ac4345332d24b048fc1b99301435e7dc5c78d5561ac9bd0c512cad1cc47080b1

  • SHA512

    160b10205c5e0bc888ec337e700c928a3880c897775e7278ec84e9b9279e058394661f9cdbfc42947b36e84c37910b98dcc54ec5d84cebad33914b8909bccf9f

  • SSDEEP

    393216:lvQ5wyLqi68Ko/AhbRu074MQIEZjBv2ZbC+p:lo5PLBAh40kJjUZbCS

  Score

  10^/10

  amadey3b4498discoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2