Extracted

• • Target

    2025-04-02_6784de327530a5fd162a370a4c500af3_amadey_rhadamanthys_smoke-loader

  • Size

    400KB

  • MD5

    6784de327530a5fd162a370a4c500af3

  • SHA1

    331b6c1c41e2fcdf3d257af94ea6f71878ee5abd

  • SHA256

    70f36ffdb6cd8f8af66288e1cd9a3d097b5bb0db4b8a0a3e4ff7f1b9fcdd1344

  • SHA512

    fed12a9ec011964a6df5495e1380f38ee547e3da8eb22da18a996a4e7a95d4d51bd4c2c29410d79be87d930f92ec148826f67b1c8660808c9ad20d33d7fbc05f

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohh:8IfBoDWoyFblU6hAJQnOr

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1