Extracted

• • Target

    1858dd5e996c40a7e75c2c118262917bc9dc7e779e55de52579cd06b40559ddc.exe

  • Size

    231KB

  • MD5

    d2d53693ba630167f3d1689defd2277a

  • SHA1

    e652a4df2934ef3187d7e62450b732ba9d35fdf6

  • SHA256

    1858dd5e996c40a7e75c2c118262917bc9dc7e779e55de52579cd06b40559ddc

  • SHA512

    bb015c508c2462fd2c563893961fa598ffe7b1c67bc587d013b1681fd5d77e8253995e08f9cdf34c0a21ea1e238f5c5091c20ac979c5c95e704728b16913d413

  • SSDEEP

    6144:AWgLu75uLPm/xUzXpxpbcpLFWS/nU8VIfsLknImS9:AWgiFgPm/xUNx4LNs8afk3X

  Score

  10^/10

  amadey0237fadiscoverytrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Amadey family

    amadey

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2