General

  • Target

    2025-04-02_a783fd653fe32a9c33079b0a6f2efcca_amadey_smoke-loader

  • Size

    516KB

  • Sample

    250402-hrg1fssyax

  • MD5

    a783fd653fe32a9c33079b0a6f2efcca

  • SHA1

    351f8899c2f16c5896a1a32402714fbe688bf945

  • SHA256

    a87a6c6e30b69b8f5aca4245c356ea5930c8f74a6b574d5292a7b90e88ab03f8

  • SHA512

    803c08707d8a6a283fb7136e7bd34e5f0855dcd0aa1c46f89894804f6d19454d81b18b9045524545f748d24bf1cb8677b47ea2693e58b56aba76472b2b78f403

  • SSDEEP

    12288:1pbfVlu0agWfZlnxgmEpZGsrUs99uDEq5EGDFhi:1pbGRZxSfGCUs99hq5J6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      2025-04-02_a783fd653fe32a9c33079b0a6f2efcca_amadey_smoke-loader

    • Size

      516KB

    • MD5

      a783fd653fe32a9c33079b0a6f2efcca

    • SHA1

      351f8899c2f16c5896a1a32402714fbe688bf945

    • SHA256

      a87a6c6e30b69b8f5aca4245c356ea5930c8f74a6b574d5292a7b90e88ab03f8

    • SHA512

      803c08707d8a6a283fb7136e7bd34e5f0855dcd0aa1c46f89894804f6d19454d81b18b9045524545f748d24bf1cb8677b47ea2693e58b56aba76472b2b78f403

    • SSDEEP

      12288:1pbfVlu0agWfZlnxgmEpZGsrUs99uDEq5EGDFhi:1pbGRZxSfGCUs99hq5J6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks