Extracted

• • Target

    914935fe8c30b7184ccfa19097c53eca43dd157b63c29429171a194dce8f9af2.exe

  • Size

    212KB

  • MD5

    f57c2b72ee75c357a12ce03a08be95b8

  • SHA1

    c0e8867ac37614f7e0e40fab9a66b9c6ef1c3249

  • SHA256

    914935fe8c30b7184ccfa19097c53eca43dd157b63c29429171a194dce8f9af2

  • SHA512

    59123bbe391f391b3c248f5be7889fad1cc806bbcbbe9ed1653c3ca687f7d27f21ba7e75215e225ddc04e29195d5e5a712e7a6219968eb1ff0e74c32d69da5da

  • SSDEEP

    3072:qeJLLpTnq5URrqNqYd31LgpI01TEr4J6anBbkPzHM38ad:zLLpThR4qYh1UG01TEr4nWw38s

  Score

  10^/10

  amadey0237fadiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2