Extracted

• • Target

    cf95dca92b0825e77760fdce4714de6aa1f53a157c5b7a8fe55051f5cb44b969

  • Size

    293KB

  • MD5

    fe096068c43e0291845e999f75f400c2

  • SHA1

    dc288ee2967ec97f6c5e0e7fb8293b3ec0aa77ea

  • SHA256

    cf95dca92b0825e77760fdce4714de6aa1f53a157c5b7a8fe55051f5cb44b969

  • SHA512

    ae9c92883625d81df83c825473adead5cf9f6a802827e4f0578ba90eeea50f7f45419dd7d6563a5d78089a9580f93f5d25273b163f1fa681a63556bb1b884c4e

  • SSDEEP

    6144:uvBqgSL8ckht0pMKiBtsFGUJsI/2QbxIwJ6c2:wBEIcg0iBQDsNQ1B0b

  Score

  10^/10

  amadey87314ediscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2